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(54) METHOD AND APPARATUS FOR PREVENTING ILLEGAL COPYING AND ILLEGAL 
INSTALLATION OF INFORMATION ON OPTICAL RECORDING MEDIUM 



(57) In a recording/reproducing apparatus in which 
reproduction of information is carried out by using an 
optical recording medium, the physical characteristics of 
a ROM disk are extracted and enciphered, and the result- 
ant ciphers are recorded on the optical disk. In order to 
reproduce the information, the physical characteristics 
obtained by deciphering these ciphers and physical 
characteristics information detected from the ROM disk 
are compared with each other. When they do not agree, 



the use of an illegally duplicated disk is inhibited by stop- 
ping the operation of the apparatus. A duplicated 
medium is detected by reproducing the physical charac- 
teristics information, which have been recorded in a 
magnetic recording layer (4) in an optical recording 
medium (2), by a magnetic head (8), and comparing this 
reproduced information with the information determined 
by a physical characteristics information detecting 
means. 
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Description 

BACKGROUND OF THE INVENTION 

5 Industrial Application Field 

The present invention relates to prevention of illegal copies of disc-like optical recording media and prevention of 
illegal install of information into information processing systems or the like, and more particularly to a method and system 
for preventing recorded music on optical disks, as well as projected images and various sorts of programs, such as game 
10 softwares (softs) and computer softwares, from being illegally copied and utilized without permission of the copyrighters, 
and further relates to an optical recording medium incapable of copy. 

Description of the Prior Art 

15 In recent years, optical disks are widely being employed i n a variety of fields. The optical disks are generally classified 
into record-possible RAM disks and record-impossible ROM disks, while the manufacturing cost of the RAM disks is 
from five times to ten times that of the ROM disks. Accordingly, the ROM disks tend to be chiefly used in applications 
that supply a large number of people with a large quantity of information, for example, an electronic publication application 
and a medium cost-limited application that supplies music softwares and projected image softwares. On the other hand, 

20 as obvious from CD-ROM game machines and CD-ROM contained personal computers, there is a need for a RAM 
function being incorporated into the ROM disks, as an extension is more being made to interactive use. Home-use 
systems seldom require a large RAM capacity, for which reason great interest is focused on the advent of a new medium 
concept capable of realizing the three conditions: a small capacity RAM function, a large capacity ROM function, and a 
low cost. In addition, illegal duplicates of ROM disks such as CDs are recently put in the market so that the copyrighters 

25 suffer serious damage. Thus, a countermeasure has been needed for the duplicate prevention. Moreover, a soft distri- 
bution method has come into wide spread use where a plurality of encrypted (enciphered) programs are incorporated 
into disks and decrypted (deciphered) through passwords, and for improving the security of the password there is a need 
for a different ID number being recorded in each ROM. 

One possible way to realize this concept is that one magnetic recording layer is equipped on the rear surface of a 

30 ROM disk, in which case the formation cost of the recording layer is less than one-tenth that of the ROM disk itself, thus 
realizing a partial RAM disk without greatly raising the cost of the ROM disk. Actually, as disclosed in Japanese Patent 
Laid-Open Nos. 56-163536, 57-6446, 57- 212642, 2-179951, in terms of ROM disks such as CD-ROM not having a 
cartridge, there have already been proposed approaches wherein an optical recording section is provided on a front 
surface of a CD-ROM and a magnetic recording section is added on the rear surface thereof. In addition, Japanese 

35 Patent Laid-Open No. 60-70543 discloses an attempt to accomplish magnetic recording by means of a combination of 
a disk wherein, like optical disks of amolphous material, an optical recording section, made of a non-magnetic material, 
is placed on its surface and a magnetic recording layer is located on its rear surface and a magnetic head which is 
equipped in a mechanical section facing the rear surface. 

On the other hand, for the duplicate prevention, only means is known which is made to manufacture a special disk 

40 through a special process, such as intentionally making a cut or openwork on the disk, so that difficulty is encountered 
to manufacture it without a special manufacturing apparatus. 

However, the aforesaid methods are merely based on a combination of a magnetic recording section and an optical 
recording section, while not containing the important requirements for definite realization of the equipment at all, such 
as the ways of avoiding the mutual interference between the optical recording section and magnetic recording section, 

45 permitting access to magnetic tracks with a simple arrangement, sharing a circuit, protecting magnetically recorded 
information on media from the external environment including magnetism and abrasion without the use of a cartridge, 
compressing information to be recorded in a RAM area, accelerating the access, and concretely making out a physical 
track format. 

Furthermore, in the prior art examples, disclosure is hardly made in terms of the ways of realizing a home-use partial 
so RAM disk in a concrete form, such as the method of mass-producing media at a low cost, which is important in realization 
of the media, and the method of making the media conformable with the CD standards. Therefore, there remains a 
problem which arises with the conventional examples in that difficulty is experienced in concrete realization of media 
and systems capable of home use. 

55 SUMMARY OF THE INVENTION 

The present invention is for eliminating above-described problems, and it is therefore a first object of the present 
invention to provide a method, system and medium which can realize a ROM type partial RAM disk and system without 
the use of a cartridge like a CD-ROM. 
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A second object of this invention is to provide a duplicate-preventing disk and system capable of preventing illegal 
duplicate through a way such as changing the physical arrangement of addresses, but not through the special method 
proposed heretofore. 

For achieving these purposes, according to this invention, when an optical disk enters in a manufacturing step, first 

5 physical feature information indicative of a physical feature including at least a two-dimensional pit arrangement or pit 
configuration is encrypted and optically or magnetically written in advance in such a manner as being distinguishable 
from the main information to be recorded in the optical disk, before, i.e., when being in reproduction, read out to be 
deciphered. At this reproduction, a physical feature of the optical disk is additionally measured to obtain second physical 
feature information. The second physical feature information is checked (collated) with the first physical feature informa- 

w tion so as to make a decision as to whether or not a specific relationship is present therebetween. When the second 
physical feature information is not in the specific relation to the first physical feature information, the operation of a specific 
program read out from the optical disk is made to stop, the reading-out of the information is designed to stop afterwards, 
or a given process of the read information by a signal processing means is adapted to stop. 

That is, according to this invention, there is provided an information reproducing system comprising means (1 7) for 

15 rotationally driving a disc-like optical recording medium (2) wherein information is recorded in the form of pits, an optical 
head (6) for reading out the recorded information from the optical recording medium, head-moving means (23) for making 
the optical head movable radially of the optical recording medium, and signal processing means for processing the 
information read out through the optical head, which system is characterised by including: 

first physical information detecting means (743, 38, 665) for detecting on the basis of information read out through 

so the optical head or a magnetic head first physical feature information (532) which is representative of a physical feature 
including at least a two-dimensional pit arrangement or pit configuration on the optical recording medium and which is 
encrypted and recorded at manufacturing of the optical recording medium; 

decryption means (534) for decrypting the first physical feature information; 

means (17a, 6, 38, 703a) for measuring a physical feature of the optical recording medium to obtain second 
25 physical feature information; 

check means (535) for checking the second physical feature information with the first physical feature information 
to make a decision as to whether or not both are in a specific relation to each other; and 

control means (71 7, 665) for, when the check means decides that the second physical feature information is not 
in the specific relation to the first physical feature information, stopping the operation of a specific program read out from 
30 the optical recording medium, for stopping the reading-out of information from the optical recording medium afterwards, 
or for stopping a given process of information, read out from the optical recording medium, the given process being 
practiced by the signal processing means. 

Moreover, according to this invention, there is provided an information recording system which is characterised by 
comprising: 

35 encryption means (537) for encrypting, using a one direction function, first physical feature information (532) 

indicative of a physical feature including at least a two-dimensional pit arrangement or pit configuration on a disc-like 
optical recording medium; and 

recording means (37, 6, 23, 24, 17, 26, 10) for recording the encrypted first physical feature information on the 
optical recording medium or an original record therefor so that the encrypted first physical feature information is distin- 

40 guishable from main information to be recorded on the optical recording medium. 

In addition, according to this invention, there is provided a method of manufacturing a disc-like optical recording 
medium, which comprises the steps of: 

recognizing first physical feature information (532) representative of a physical feature at least including a two- 
dimensional pit arrangement or a pit configuration on the disc-like optical recording medium; 

45 encrypting the first physical feature information by using a one direction function; and 

recording the encrypted first physical feature information on the optical recording medium or an original record 
therefor so that the encrypted first physical feature information is distinguishable from main information to be recorded 
on the optical recording medium. 

Furthermore, according to this invention, there is provided a disc-like optical recording medium which is manufac- 

50 tured through the steps of recognizing first physical feature information (532) representative of a physical feature at least 
including a two-dimensional pit arrangement or a pit configuration on the disc-like optical recording medium, encrypting 
the first physical feature information by using a one direction function; and recording the encrypted first physical feature 
information on the optical recording medium or an original record therefor so that the encrypted first physical feature 
information is distinguishable from main information to be recorded on the optical recording medium. 

55 Still further, there is provided a method of preventing an illegal copy of a disc-like optical recording medium or of 
preventing an illegal install of information on the disc-like optical recording medium, which comprises the steps of detect- 
ing on the basis of information read out from the optical recording medium first physical feature information (532) which 
is representative of a physical feature including at least a two-dimensional pit arrangement or pit configuration on the 
optical recording medium and which is encrypted and recorded by using a one direction function at manufacturing of 
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the optical recording medium; 

decrypting the first physical feature information; 

measuring a physical feature of the optical recording medium to obtain second physical feature information; 

checking the second physical feature information with the first physical feature information to make a decision as 
s to whether or not both are in a specific relation to each other; and 

when the check step decides that the second physical feature information is not in the specific relation to the first 
physical feature information, stopping the operation of a specific program read out from the optical recording medium, 
stopping the reading-out of information from the optical recording medium afterwards, or stopping a given process of 
information, read out from the optical recording medium, the given process being practiced by signal processing means. 
10 Moreover, there is provided a method of preventing an illegal copy of a disc-like optical recording medium or of 
preventing an illegal install of information on the disc-like optical recording medium, which comprises the steps of: 

detecting first physical feature information (532) from the optical recording medium, the first physical feature 
information being indicative of a physical feature at least including a two-dimensional pit arrangement or a pit configu- 
ration on the optical recording medium, encrypted using a one direction function and recorded on the optical recording 
15 medium or an original record therefor so as to be distinguishable from main information to be recorded on the optical 
recording medium; 

decrypting the first physical feature information; 

measuring a physical feature of the optical recording medium to obtain a second physical feature information; 

checking the second physical feature information with the first physical feature information to make a decision as 
20 to whether or not both are in a specific relation to each other; and 

when the check step decides that the second physical feature information is not in the specific relation to the first 
physical feature information, stopping the operation of a specific program read out from the optical recording medium, 
stopping the reading-out of information from the optical recording medium afterwards, or stopping a given process of 
information, read out from the optical recording medium, the given process being practiced by signal processing means. 

25 
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Contents of This Specification 

This specification contains detailed descriptions of many embodiments, and a table of the brief contents thereof is 
herein appended as follows. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing a mastering apparatus for a recording system according to a preferred second 

40 embodiment of this invention; 

Fig. 2A is an illustration of variation of linear velocity with time at recording in the second embodiment; 
Fig. 2B is an illustration of address locations on an optical disk at 1.2 m/s in the second embodiment; 
Fig. 2C is an illustration of address locations on an optical disk at 1 .2 m/s -> 1 .4 m/s; 
Fig. 3A is an illustration of a physical arrangement of addresses of a legal CD in the second embodiment; 

45 Fig. 3B is an illustration of a physical arrangement of addresses of an illegally duplicated CD in the second embod- 
iment; 

Fig. 4(a) is an illustration of the relationship between rotational pulses for a disk and time in the second embodiment; 

Fig. 4(b) is an illustration of the relationship between a physical position signal and time in the second embodiment; 

Fig. 4(c) is an illustration of the relationship between address information and time; 
so Fig. 5 is an illustration for describing a duplicate preventing principle for a CD in the second embodiment; 

Fig. 6 is a block diagram showing a recording and reproducing system according to the second embodiment; 

Fig. 7 is a flow chart for check of an illegally duplicated disk in the second embodiment; 

Fig. 8A is a process illustration of a CD with an ID number recorded in a first embodiment; 

Fig. 8B is an illustration of an process for a prior art CD; 
55 Fig. 9A is a top view of a magnetizing device in the first embodiment; 

Fig. 9B is a side elevational view showing a magnetizing device in the second embodiment; 

Fig. 9C is an enlarged side elevational view showing the magnetizing device in the second embodiment; 

Fig. 9D is a block diagram showing the magnetizing device in the second embodiment; 

Fig. 1 0 is an illustration of the principle of ID number input in the first embodiment; 
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Fig. 1 1 A is an illustration of the relationship between a linear velocity and time at a constant linear velocity in the 
second embodiment; 

Fig. 1 1 B is an illustration of the relationship between a linear velocity and time at variation of the linear velocity in 
the second embodiment; 

Fig. 1 1 C is an illustration of a physical arrangement of addresses at a constant linear velocity in the second embod- 
iment; 

Fig. 1 1 D is an illustration of a physical arrangement of addresses at variation of the linear velocity in the second 
embodiment; 

Fig. 12A is a cross-sectional view of a legal original record in the second embodiment; 

Fig. 12B is a cross-sectional view showing a legally formed disk in the second embodiment; 

Fig. 12C is a cross-sectional view showing an illegally duplicated original record in the second embodiment; 

Fig. 1 2D is a cross-sectional view showing an illegally duplicated formed disk in the second embodiment; 

Fig. 13 is a block diagram showing a CD fabricating device and recording and reproducing system in the second 

embodiment; 

Fig. 14 is a flow chart of the second embodiment; 

Fig. 1 5 an illustration of an address arrangement on a disk original record in the second, fourth and seventh embod- 
iments; 

Fig. 16 is a block diagram showing a recording and reproducing system in the second embodiment; 

Fig. 1 7A is a cross-sectional view showing an illegal disk in a third embodiment; 

Fig. 1 7B is a cross-sectional view showing a legal disk in the third embodiment; 

Fig. 1 7C is an illustration of a waveform of an optical regenerative signal in the third embodiment; 

Fig. 17D is an illustration of a digital signal in the third embodiment; 

Fig. 1 7E is an illustration of an envelope waveform in the third embodiment; 

Fig. 1 7F is an illustration of a digital waveform in the third embodiment; 

Fig. 1 7G is an illustration of a waveform of a detection signal in the third embodiment; 

Fig. 18 illustrates a disk physical arrangement table in the third embodiment; 

Fig. 19A is an illustration of an address arrangement on an optical disk which is not in an eccentric condition, in the 
third embodiment; 

Fig. 1 9B is an illustration of an address arrangement of an optical disk which is in an eccentric condition, in the third 
embodiment; 

Fig. 20A is an illustration of tracking displacement of a legal disk in the third embodiment; 

Fig. 20B is an illustration of tracking displacement of an illegally duplicated disk in the third embodiment; 

Fig. 21 A shows an address An in the third embodiment; 

Fig. 21 B illustrates an angle Zn in the third embodiment; 

Fig. 21 C shows an tracking displacement Tn in the third embodiment; 

Fig. 21 D illustrates a pit depth Dn in the third embodiment; 

Fig. 22 is illustrative of a laser output, pit depth and regenerative signal in the third embodiment; 

Fig. 23 is illustrative of a duplicate preventing effect relating to each original record fabricating apparatus in the 

second and third embodiments; 

Fig. 24 is a block diagram showing an original record fabricating apparatus in the second and third embodiments; 
Fig. 25 is a block diagram showing an original record fabricating apparatus in the second and third embodiments; 
Fig. 26 is a block diagram showing an original record fabricating apparatus in the second and third embodiments; 
Fig. 27 is a block diagram showing an original record fabricating apparatus in the second and third embodiments; 
Fig. 28 is a block diagram showing an original record fabricating apparatus in the second and third embodiments; 
Fig. 29 is a blockdiagram wholly showing an original record fabricating system in the second and third embodiments; 
Fig. 30A is an illustration of a waveform of a laser output in the third embodiment; 
Fig. 30B is an illustration of a waveform of a laser output in the third embodiment; 
Fig. 30C is a cross-sectional view showing a substrate in the third embodiment; 
Fig. 30D is a cross-sectional view showing a substrate in the third embodiment; 
Fig. 30E is a cross-sectional view showing a formed disk in the third embodiment; 

Fig. 31 is an illustration of the relationship between an laser recording output and regenerative signal in the third 
embodiment; 

Fig. 32 is illustrative of a process for an original recording fabrication in the third embodiment; 
Fig. 33A is a top view showing a fabricated original record in the third embodiment; 

Fig. 33B is a transverse cross-sectional view showing a press die for an original record in the third embodiment; 
Fig. 34 illustrates a process for an original record fabrication in the third embodiment; 
Fig. 35A is a top view showing a fabricated original record in the third embodiment; 

Fig. 35B is a transverse cross-sectional view showing an original record and press die in the third embodiment; 
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Fig. 36 is a flow chart showing a process for fabricating an original record and for manufacturing a recording medium 
in the third embodiment; 

Fig. 37 is a flow chart showing a disk check method in the third embodiment; 
Fig. 38 is a block diagram showing disk formation in the third embodiment; 

Fig. 39 is a block diagram showing a low-reflection portion position detecting section in the third embodiment; 
Fig. 40 is a block diagram showing a recording and reproducing system in the third embodiment; 
Fig. 41 A is a top view of a disk in a fourth embodiment; 
Fig. 41 B is a top view of a disk in the first embodiment; 
Fig. 41 C is a top view of a disk in the first embodiment; 

Fig. 41 D is a transverse cross-sectional view showing a disk in the first embodiment; 
Fig. 41 E is an illustration of a waveform of a regenerative signal in the first embodiment; 

Fig. 42 illustrates a principle for position detection of an address and clock of a low-reflection portion in a fourth 
embodiment; 

Fig. 43 is an illustration of comparison between low-reflection portion address tables of a legal disk and duplicated 
disk in the fourth embodiment; 

Fig. 44 is a flow chart showing a disk check using a one direction function in the second, third and fourth embodi- 
ments; 

Fig. 45 is an illustration of coordinate positions of original records in the second embodiment; 

Fig. 46 is a flow chart of a low-reflection position detection program in the fourth embodiment; 

Fig. 47 is a flow illustration of a manufacturing method of a low-reflection portion in the fourth embodiment; 

Fig. 48 is a flow illustration of a manufacturing method of a low-reflection portion in the fourth embodiment; 

Fig. 49 is a flow illustration of a manufacturing method of a low-reflection portion in the fourth embodiment; 

Fig. 50 is a flow illustration of a manufacturing method of a low-reflection portion in the fourth embodiment; 

Fig. 51 is a top view showing a disk in the fourth embodiment; 

Fig. 52 shows a data structure of a master cipher in a six embodiment; 

Fig. 53 is an illustration of physical formation in the six embodiment; 

Fig. 54 is an illustration of a principle for duplicate detection by an error CP code in a fifth embodiment; 

Fig. 55 is an illustration of a principle for duplicate detection by an EFM patent code in a fifth embodiment; 

Fig. 56 is an illustration of a duplicate preventing EFM conversion table in the fifth embodiment; 

Fig. 57 is a flow chart showing a selection method of a plurality of sub-cipher encoders in the sixth embodiment; 

Fig. 58 is a flow chart showing an install allowing method in the sixth embodiment; 

Fig. 59 is a principle illustration of a disk based on a duplicate preventing method using an optical mark in the first 
embodiment; 

Fig. 60 shows a manufacturing process of a low-reflection portion of an optical disk in a seventh embodiment; 
Fig. 61 illustrates a manufacturing process of first and second low-reflection portions in the seventh embodiment; 
Fig. 62A is a block diagram showing a recording and reproducing system based on an off-track method in an eighth 
embodiment; 

Fig. 62B is an illustration of tracking in an on-track condition according to an off-track method in the eighth embod- 
iment; 

Fig. 62C is an illustration of tracking in an off-track condition due to an off-track method in the eighth embodiment; 
Fig. 63 is an principle illustration of a duplicate preventing method based on a combination of an arrangement angle 
detecting method and an off-track signal method in the eighth embodiment; 

Fig. 64A is a top view showing a foreign material arrangement on a label surface of a CD in a ninth embodiment; 
Fig. 64B shows a displaying state of a CD in a display section in the ninth embodiment; 
Fig. 65 illustrates a displaying state state of an error message in a display section in the ninth embodiment; 
Fig. 66 is a flow chart showing a cleaning display in the ninth embodiment; 

Fig. 67 is an illustration of a manufacturing process of a bar code due to cutting in the seventh embodiment; 

Fig. 68 is an illustration of a manufacturing process of first and second reflection films in the seventh embodiment; 

Fig. 69 is a block diagram showing a magnetic recording system in an eleventh embodiment; 

Fig. 70 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 71 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 72 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 73 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 74 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 75 is a flow chart showing an operation of the eleventh embodiment; 

Fig. 76 is an illustration of a data hierarchical structure of a ROM section and RAM section of an optical disk in the 
eleventh embodiment; 

Fig. 77 is a block diagram showing an image encoding section in an twelfth embodiment; 
Fig. 78 is a block diagram showing an image compressing encoder in the twelfth embodiment; 
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Fig. 79 is a flow chart showing an operation of the twelfth embodiment; 
Fig. 80 is a flow chart showing an install program in the first embodiment; 
Fig. 81 is an illustration of display on a screen in the first embodiment; 

Fig. 82 is a block diagram showing a recording and reproducing system according to the first embodiment; 

Fig. 83 is a flow chart showing encryption in a thirteenth embodiment; 

Fig. 84 is a flow chart showing a main cipher in the thirteenth embodiment; 

Fig. 85 is a flow chart showing a reflecting film recording routine in the thirteenth embodiment; 

Fig. 86 is a flow chart at disk reproduction in the thirteenth embodiment; 

Fig. 87 is a flow chart showing a decryption in the thirteenth embodiment; 

Fig. 88A is a block diagram showing a mastering apparatus in a fourteenth embodiment; 

Fig. 88B is a block diagram showing a mastering apparatus in a fourteenth embodiment; 

Fig. 89 is a flow chart showing formation of an original record in the fourteenth embodiment; 

Fig. 90 is a block diagram showing an information processing unit in the fourteenth embodiment; 

Fig. 91 is a flow chart at information reproduction in the fourteenth embodiment; 

Fig. 92 shows a reproduction principle of an in-phase signal in the eighth embodiment; 

Fig. 93A is illustrative of the principle of a two-point coincidence system in the eighth embodiment; 

Fig. 93B is illustrative of the principle of a three-point coincidence system in the eighth embodiment; 

Fig. 94 is illustrative of four-point coincidence system in the eighth embodiment; 

Fig. 95 is a first flow chart in the thirteenth embodiment; 

Fig. 96 is a second flow chart in the thirteenth embodiment; and 

Fig. 97 is a top view showing a second low-reflection portion in the seventh embodiment. 

Reference marks used in the drawings will be described hereinbelow for reference. 
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optical recording block 
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uniform magnetic field area 
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magnetic field modulation magnetic 
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cancelling magnetic head 
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magnetic recording block 
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system control section 
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motor 
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optical head 
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head base 


23, 23M 


head moving actuator 
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traverse actuator 
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traverse movement circuit 
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tracking circuit 
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memory 


34a 


memory (for system) 
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optical recording circuit 
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time base circuit 
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optical recording section 
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optical output section 
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clock reproduction circuit 
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printing 
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protective layer 
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reproduction step 
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recording copy step 
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recording step 
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copy step 
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liner pin 
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liner pin guide 
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pin driving lever 
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liner driving section 
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pin shaft 
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spring 
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coupling portion 


10 


319 


pin shutter 




320 


optical address 




321a 
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DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

A description will be made hereinbelow in terms of the embodiments of this invention. This invention involves various 
embodiments relating to an information recording system, information reproducing system, manufacturing method of an 

15 optical recording medium and optical recording medium which can realize a method and system for the prevention of 
illegal copy of an optical recording medium and illegal install of information on an optical recording medium. An original 
record fabricating apparatus, so-called mastering apparatus, for fabricating optical disks is included in the information 
recording system, and a reproducing apparatus such as a CD drive general users employ is included in the information 
reproducing system. In addition, a system such as a photo-magnetic recording type mini-disk (MD) reproducible and 

20 recordable at the user side is described as a recording and reproducing system, while the "recording" is different from 
the "recording" at fabrication of the original record. 

The following table shows the contents of the embodiments and the corresponding figures. 

First Embodiment 

25 

Contents : A method of preventing a software from being illegally installed with a pirate edition preventing system accord- 
ing to this invention incorporated. 
Figure : Fig. 59 

30 Second Embodiment 

Contents : A basic concept of a pirate edition preventing system according to this invention which uses, as first physical 
feature information, arrangement angle information of coordinate arrangements of pits for a specific signal on a recording 
medium. 
35 Figure : Figs. 1 , 5 

Third Embodiment 

Contents : A method for employing, as first physical feature information, the information on a tracking quantity and pit 
40 depth on a recording medium. 
Figure : Figs. 13, 16, 20 

Fourth Embodiment 

45 Contents : A recording method by a second low-reflection section. 

1 . A method wherein a second low-reflection section is used as first physical feature information in the second 
embodiment. 

2. A method of recording a first cipher with a plurality of second low-reflection sections being set on the basis of a 
so modulated signal on an optical recording medium. 

Figure : Figs. 38 to 40 

Fifth Embodiment 



1 . A method wherein an error signal is used as the first physical feature information in the second embodiment. 

2. A method wherein a special (EFM) code is used as thef irst physical feature information in the second embodiment. 
Figure : Figs. 54 to 56 



55 Contents : 
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Sixth Embodiment 

Contents : A method of limiting the install with encryption is made by a combination of the first physical feature information 
and a sub-cipher number. 
5 Figure : Fig. 58 

Seventh Embodiment 

Contents : Another data recording system and producing method for a second low-reflection section, which is different 
10 from the fourth embodiment. 
Figure : Fig. 60 

Eighth Embodiment 

15 Contents : A method wherein an arrangement state of inphase pits is employed as the first physical feature in the second 
embodiment (three-point coincidence system). 
Figure : Figs. 60 to 63, 92, 94 

Ninth Embodiment 

20 

Contents : A method of detecting dust which exists in a first cipher recording area, and a method of displaying the position 
of the dust. 
Figure : Fig. 64 

25 Tenth Embodiment 

Contents : A method wherein an offset voltage signal is employed as the first physical feature information in the second 

embodiment. 

Figure : Fig. 31 

30 

Eleventh Embodiment 

Contents : A method of stopping the operation of an illegal copy program. 
Figure : Figs. 69, 770 to 74 

35 

Twelfth Embodiment 

Contents : A method of preventing a scramble from being released at illegal use with the first physical feature information 
and a scramble key being encrypted by a one direction function. 
40 Figure : Figs. 77 to 79 

Thirteenth Embodiment 

Contents : 

45 

1 . A method of providing a plurality of cipher decoders on a ROM. 

2. A method of using an elliptic function as the one direction function in the second embodiment. 
Figure : Figs. 83, 86 

so Fourteenth Embodiment 

Contents : A method of fabricating an original record wherein recording is made from the outer circumferential portion 
to the inner circumferential portion, the first physical feature information is measured and the first cipher is recorded at 
the inner circumferential portion. 
55 Figure : Figs. 88, 89 
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[First Embodiment] 

The first embodiment relates to a system and method for the prevention of illegal duplication from a CD or CD-ROM 
or illegal copy of a program on a CD-ROM to more than the legal number of personal computers. First, a detailed 

5 description will be made in terms of a method of releasing a key (unlocking) to execute a specific program recorded on 
an optical disk such as a CD-ROM which contains a number of programs keys such as passwords. Since a CD as shown 
in Fig. 59 employs a disk copy preventing (protection) method according to this invention which will be described here- 
inafter with reference to Figs. 70 to 72, difficulty is encountered to duplicate the CD. In addition, on an optical mark 
section 387 there is recorded an ID Number which is different at every disk. This ID number is read through an optical 

10 sensor 386 comprising a light-emitting section 389a and a light-receiving section 389b to obtain, for example, data 
"204312001" which in turn, is inputted into a disk ID number (OPT) item of a key managing table 404 in a memory of a 
reading CPU. Although this method is usually effective, there is a possibility that an illegally duplicating traders concerned 
make the duplication by means of a printing machine. Moreover, in order to improve the duplication preventing effect, 
an extremely high He section 401 such as a 40000e material made of barium ferrite is provided so as to magnetically 

15 record the magnetic ID Number (Mag) data "205162" in the factory. This data is reproducible with a common magnetic 
head, and the reproduced data is put in the disk ID number (Mag) item of the key managing table 404. 

As shown in Fig. 8A which is an illustration of a process to record an ID number, the employment of a magnetizing 
device 540 as shown in Figs. 9A to 9D permits the time required for the process to record the ID number on a recording 
medium 2 to become below 1 second. This magnetizing device 540 has a ring-like configuration as shown in Fig. 9A 

20 and has a plurality of magnetizing poles 542a to 542f as illustrated in Figs. 9C and 9D which are enlarged views, coils 
545a to 545f being wound around the magnetizing poles 542a to 542f, respectively. This plurality of magnetizing poles 
542a to 542f are some of the whole magnetizing poles, and all the magnetizing poles are approximately 100 in number, 
for example. The current from a magnetizing current generator 543 flows through a current direction switching device 
544 so that currents flowing in preset directions advance into the coils 545a to 545f, thus allowing the magnetization to 

25 be accomplished in a desired direction at every pole. Fig. 9D shows an example that the magnetizing directions are set 
to establish S, N, S, S, N, S poles from the left side. In this case, on a magnetic recording layer 3 there are in an instant 
formed magnetically recorded signals in the directions indicated by arrows 51 a, 51 b, 51c and 51d. It is possible to record 
the signals even on a high He magnetic material such as a 40000e material. Accordingly, the time needed fro the process 
shown in Fig. 8A is substantially equal to that for a conventional process shown in Fig. 8B, with no lengthened time for 

30 the production of a CD. 

In a method wherein an ID number is magnetically recorded through a magnetic head while the recording medium 
2 rotates, the time required for the start-up of rotation of the medium 2, several turns of the medium and the stopping 
of the rotation is several seconds. For this reason, there is a problem in that difficulty is experienced to introduce it to a 
CD mass production process, in which the processing time for giving the ID number is approximately 1 second, without 

35 changing the flow of the process. 

In Fig. 8A which is the illustration of the process for giving an ID number, the employment of the magnetizing device 
540 illustrated in Figs. 9A to 9D allows the process time for recording the ID number on the medium 2 to be less than 1 
second, with the result that this is more suitable for a process which has a fast through put. The recording operation of 
the magnetizing device 540 is as follows. That is, as described above the current direction switching device 544 permits 

40 currents to flow into the coils 545a to 545f in desired directions, which achieves arbitrary magnetizing directions. Since 
the Figs. 9A to 9D magnetizing device 540 allows the flows of the currents to the respective coils 545a to 545f in set 
directions, it is possible to obtain a set magnetizing direction to make a different pattern at every disk. In Fig. 9D, the 
magnetizing directions are set to make a pattern of S, N, S, S, N, S poles from the left side, in which case the magnetic 
recording layer 3 instantaneously has the magnetically recorded signals on its specific track in the arrow 51a, 51b, 51c, 

45 51 d directions for several milliseconds. Accepting a large current, magnetizing devices make it possible to accomplish 
the recording even on a high He magnetic material such as 40000e. Accordingly, as illustrated in Fig. 8A, the operating 
time for the recording the ID number is approximately the same as that in the prior Fig. 8B process and, hence, the CD 
production is possible without changing thef low of the process at all. In addition, in the case of the use of the magnetizing 
device 540, since the ID number can magnetically be recorded with no relation of the medium 2, it is possible to reduce 

so the through put in the process, as well as to accomplish the accurate printing in the printing process after the recording 
of the ID number of the Fig. 8A because of no rotation of the medium 2. At present, a magnetic head is commercially 
available which permits the recording on a magnetic recording layer whose He is about 27000e. Thus, when He is low, 
there arises a problem in that the revision of the ID number is possible. On the other hand, the magnetizing device 540 
generally generates a strong magnetic field, which allows the magnetic recording layer 3 having as high He as 40000e 

55 to permit the recording of the ID number, thereby eliminating such a problem. In the case where the ID number is recorded 
in a specific track of the high He magnetic recording layer 3, since the ID number of this medium is not rewritable, i.e., 
can not be revised, through a usually available magnetic head 8, it is possible to ensure a higher degree of security for 
the password related to the ID number of the medium. 
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Furthermore, according to this invention, as illustrated in Fig. 1 0, a mixer 547 mixes a signal from a unique ID number 
generator 546 with the data on a physical configuration table (the first physical feature information) 532 of a disk so as 
to make difficult the separation therebetween if there is no key, the mixture signal, together with a separation key, being 
fed to an encrypting device 537 and the resulting cipher 538 being recorded on a magnetic recording track 67 in a 

5 magnetic recording area of a disk after the formation process for the disk or recorded on an optical recording track 65 
in the original record formation process. The magnetic recording track 67 and optical recording track 65 are provided in 
an area different from the main information recording area. For instance, they are placed at an inner circumferential 
section or outer circumferential section of the disk, and for the magnetic track 67, they may be located on the surface 
opposite to the optical recording layer surface. The aforesaid physical configuration table 532 will sometimes be described 

10 as a physical arrangement table. In the recording and reproducing system 1 side, a cipher decoder 543 decrypts the 
cipher and a separation device 549 separates the ID number 550 from the disk physical arrangement table 532 by means 
of the separation key to check the illegal disk according to the illegal disk check method according to this invention, 
which will be described later with reference to Figs. 70 to 71, thereby stopping the operation of the illegal disk. 

In the case of the Fig. 10 method, the cipher (first cipher) 538 to be recorded on the magnetic recording track 67 is 

15 based on the mixture signal of the ID number created by the unique ID number generator 546 and the disk physical 
arrangement table, thus being different at every disk. As a matter of course, this disk employs the illegal duplication 
preventing method according to this invention which will be described later with reference to Figs. 5 and 7, whereby the 
illegal duplication traders concerned can not illegally duplicate the optical recording section of a CD. Accordingly, even 
if taking one sheet of normal disk to try to illegally use the legal disk a person can not illegally use it except for the revision 

20 of its ID number. If there is a disk fabricated on the basis of an original record corresponding to a disk whose password 
is known, the fabrication of the same disk is possible with the same first cipher being recorded in the magnetic recording 
section. This means that the employment of the password causes the illegal use. If the first cipher of the disk physical 
arrangement table and the ID cipher of the ID number are recorded separately, the same first cipher of the physical 
arrangement table is recorded on the magnetic recording layers of all the disks due to the same original record, whereby 

25 people can readily find that it is a disk due to the same original record. For this reason, when the ID cipher of the ID 
number is rewritten with the ID cipher of the ID number whose password is known, there is a possibility that the illegal 
use easily take place. However, According to the Fig. 1 0 method, a plurality of different original records are present with 
respect to one title, and further, even if the disks are fabricated through the same original record, the first cipher is entirely 
different at every disk, which makes it difficult to recognize from the first cipher that two disks are due to the same original 

30 record. 

First, a description will be made in terms of the principle of making it difficult to find, on the basis of the first cipher, 
a disk fabricated by the same original record. Although many pieces of first physical feature information of the original 
record are detectable, the recording capacity of the disk 2 shows limitation. Moreover, even if first physical feature infor- 
mation requiring a large capacity are recorded, the decryption may take much time. The time allowed for the decryption 

35 is approximately 1 second, thus limiting the data quantity of the first cipher. For this reason, actually the first physical 
feature information of the disk results in being obtained by the selection of a portion from the first physical feature infor- 
mation obtained. That is, the first physical feature information is obtainable by the selection of one from a number of 
selective values. In this illustration, the selective value is changed at every disk by a physical information selecting means 
532a shown in Fig. 1 0. Therefore, even if the disks are due to the same original record, each of the disks has a different 

40 first physical feature information so that the first ciphers are different from each other. 

As described above, some original records are usually fabricated in terms of one software, and each of the disks 
has a different first psychical feature information. From the above, the probability that the disks has the same first cipher 
becomes extremely low, thereby making it impossible to find a disk due to the same original record even if the first cipher 
data is available. Finding it requires the measurement of the physical feature information of the disk. Thus, it is difficult 

45 for a general user to find a disk due to the same original record. 

Furthermore, according to this invention, as described with reference to Fig. 1 0, the first physical feature information 
and different ID number given at every disk are enciphered together. Accordingly, even if a disk whose decryption pass- 
word is known is obtained to replace the first cipher of this disk with the first cipher of another disk, its operation stops 
by means of the pirate edition preventing program except that the first physical feature information, i.e., the original 

so record, is not the same. Therefore, it does not operate at all. In the Fig. 1 0 method, since difficulty is encountered to find 
a disk fabricated by the same original record, the general users can not almost do the revision of the ID, thus preventing 
the general users from doing the illegal use. There is no way except that the information on the disk physical arrangement 
table 532 are read out from the whole area of the disk so as to check as to whether or not the same original record is 
used. For checking all the data on the address, angular arrangement, tracking, pit depth and error rate, the time is also 

55 required for confirmation. Accordingly, it is difficult for the illegal duplication traders concerned to find a disk fabricated 
by an original record which produced a disk such as a CD whose password is known, which makes it difficult that the 
illegal duplication traders concerned revises the ID number. 

A concrete procedure will then be described with reference to a flow chart of Fig. 80. Fig. 69 is a block diagram of 
the whole including a CPU 665 and a magnetic recording and reproducing means, the operations of the parts of which 
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will be described hereinafter. In Fig. 80, in a step 405, in response to the input of a start-up command for the program 
No. N to the CPU 665, the CPU 665 executes a step 405a to read as to whether or not the key information for the program 
is recorded on a magnetic track. At this time, a recording current is made to flow through the magnetic head 8 so as to 
erase that data. In the case of the legal disk 2, the key information is not erasable for that He is high. On the other hand, 

5 if it is an illegal disk, the key information disappears. Then, a step 405b is executed in order to check whether or not the 
key data, i.e., a password, exists. If the answer is "NO", the user receives a key input command on a screen as shown 
in Fig. 81 , then followed by a step 405d where the user inputs, for example, "123456" which in turn, is checked as to 
whether it is in the right or not in a step 405e. If the answer is "NO", in a step 405f the operation stops and a display is 
made on a display section 16 to indicate that the key is not in the right or it is a duplicated disk. On the other hand, if 

ro the answer is "YES", the operational flow goes to a step 405g in which the key data for allowing the execution of the 
program No. N is recorded on a magnetic track on the recording medium 2, subsequently followed by a step 405i. In 
this invention, an ID mark such as a bar code is provided on a surface opposite to the optical reading surface of an 
optical disk as shown in Fig. 59, or a bar code 619 is provided on the optical reading surface as shown in Fig. 49. 
Returning back to the step 405b, if the answer is "YES", the operational flow advances to a step 405h to read the 

15 key data for the program No. N, and then proceeds to the step 405i to read the disk ID (OPT) on the optical recording 
layer, and further goes to a step 504j to read the disk ID (mag) on the magnetic recording layer, and still further enters 
into a step 405 to check whether they are in the right or not. If the decision shows "NO", a step 405m is executed to 
display "duplicated disk", then terminating the operation. On the other hand, if the decision indicates "YES", a step 405n 
is executed in order to make the decryption calculation for the key data, disk ID (OPT) and disk ID (Mag), then followed 

20 by a step 405p to check whether the data are in the right or not. If the answer is "NO", an error display is made in a step 
405q. If the answer is "YES", the use of the program No. N starts in a step 405s. 

In the case of using this method according to this invention, if for CDs 120 tunes each being voice-compressed to 
1/5 are recorded and for game softs several hundreds of titles are recorded so that 12 tunes or one game can initially 
be listened, they can be released at the cost corresponding to the copyright fee for 12 tunes or one game. Further, when 

25 the user paid the fee afterwards, the soft trader informs him of the key for the ID No. of the disk, which allows the use 
of additional softs such as tunes and games as shown in Fig. 59. In this case, the employment of a sound expansion 
block 407 permits music soft containing a maximum of 1 20 tunes to be recorded on one CD, for that the sound expansion 
expands the recording quantity to five times, i.e., 370 minutes. Thus, the user can listen to a favorite tune from the 
recorded tunes when unlocked. Once the key is unlocked, the key data is recorded so that there is no need to always 

30 use the key. This method is applicable to electronic dictionaries general programs other than the music CDs and game 
CDs, providing the same effects. For reducing the cost, it is also possible to omit the ID No. for the high He section 401 . 

[Second Embodiment] 

35 Secondly, a description will be made in terms of a second embodiment which relates to a method of preventing the 
duplication of a CD itself, i.e., preventing the production of the so-called pirate CD by the illegal copy of the legal CD. In 
this embodiment, the two-dimensional arrangement of pits of a disk is treated as the first physical feature information. 
Nowadays, CDs are illegally duplicated in various manners to produce pirate CDs which in turn, are put in the market, 
and a way of preventing the duplication is needed. Difficulty is experienced to prevent the duplication only with softwares 

40 such as encryption. The second embodiment prevents the duplication utilizing a cipher and a pit arrangement of a CD. 
Fig. 1 is a block diagram showing a mastering apparatus for fabricating an original record for CLV type optical disks. 
The mastering apparatus 529 comprises a linear velocity control section 26a whereby an optical head 6 generates an 
optical beam to exposure-record latent images of pits on a photosensitive surface of a disk 2 while the linear velocity is 
kept within the range of 1 .2 m/s to 1 .4 m/s for CDs. For CDs, a tracking circuit 24 increases the radius r in pitch of about 

45 1 .6 |xm per revolution so that the pits are recorded spirally. Thus, the data are recorded spirally on an original record as 
shown in Fig. 3A. In the case of a CAV optical disk such as a video disk, an original disk is reproduced and an original 
record is fabricated through rotational control completely connected with the rotation of the original disk. Accordingly, if 
the third party gets master data 528, the mastering apparatus 529 can easily fabricate an original record for an optical 
disk having the completely same pattern as a legally manufactured CAV optical disk. For CAV, the difference in pit pattern 

so between the legally manufactured original record and the illegally fabricated original record becomes below several urn. 
For this reason, the conventional method can not distinguish between the legally fabricated optical disk and the illegally 
produced optical disk on the basis of the physical arrangement of a pit pattern. 

On the other hand, for CLV optical disks such as CD-ROMs, the pits are spirally recorded on an original record at 
an initially set constant linear velocity ranging from 1 .2 to 1 .4 m/s. In the case of CAV, the amount of data to be recorded 

55 per revolution is always constant, while in the case of CLV the data amount per revolution varies as the linear velocity 
varies. When the linear velocity is low, the data arrangement 530a as shown in Fig. 3A takes place, and when the linear 
velocity is high, the data arrangement 530b as shown in Fig. 3B occurs. Thus, according to the normal mastering appa- 
ratus, there comes out the difference in data arrangement between the legal CD and illegal copied CD. In the mastering 
apparatus for the common CDs commercially available, the linear velocity can be set with accuracy as high as 0.001 
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m/s, and the original record is made with a constant linear velocity. However, even if the original record for 74-minute 
CDs is fabricated with such a high accuracy at the linear velocity of 1 .2 m/s, when the error is shifted to the plus side at 
the outermost circumferential track, an error corresponding to 1 1 .783 revolutions takes place. That is, as compared with 
the ideal original record, the original record to be fabricated has the data arrangement 530b whose angular error is 

5 1 1 .783 revolutions x 360 degrees at the outermost circumferential track. Accordingly, as shown in Figs. 3A and 3B, the 
legal CD and illegal CD have different data arrangements 530, i.e., different A1 to A26 addresses 323a to 323x. For 
instance, when the CD is divided into four sections to define Z1 to Z4 arrangement zones 531 , the arrangement zones 
531 of the A1 to A26 addresses 323 are different from each other. Accordingly, when a corresponding table between 
the arrangement zones 531 and the addresses 323 for two CDs are drawn out, as shown in Figs. 3A and 3B it is found 

10 that the physical position tables 532a and 532b of the legal CD and illegally duplicated CD are different from each other. 
This difference allows distinguishing between the illegally duplicated CD and the legal CD. However, even if a CD is 
fabricated which is hard to duplicate, the effect comes down if the method of checking the legal CD is in easy revision. 
According to this invention, as shown in Fig. 5, the physical position table 532 is made during the fabrication of the CD 
original record or after the completion of production of the original record. This physical arrangement table 532 is 

15 encrypted by an encryption means 537 on the basis of a one direction function such as an RSA type disclosure cipher 
key and then recorded in an optical ROM section 65 of the CD medium 2 or in the magnetic recording track 67 of the 
CD medium 2a. 

Subsequently, in the drive side, a cipher signal 538b is reproduced from the CD medium 2 or 2a and the physical 
arrangement table 532 is restored using a decryption program 534 reproduced from the optical recording section of the 

20 CD. Further, disk rotational (turning) angle information 335 corresponding to the actual CD address 38a is obtained on 
the basis of an index or a rotational pulse signal from the aforesaid FG by using a disk check program 533a similarly 
reproduced from the CD and checked with the data of the physical arrangement table 532. If OK, the operation starts. 
If NO, a decision is made such that it is an illegally duplicated CD, thus stopping the operation of soft programs or the 
reproduction of the music softs. In the illegally copied CD shown in Fig. 33B, the physical position table 532b is different 

25 from that of the legal CD, whereby the CD is rejected. The illegally duplicated CD does not come into operation except 
for the decryption of a cipher decrypting program 537. Accordingly, even though the cipher signal is copied, the rejection 
takes place. Thus, it is possible to almost completely prevent the reproduction of the illegally copied CD. 

There may be three ways the illegal duplication traders concerned can take as countermeasures: 1) fabricating a 
CLV disk original record having the totally same pit pattern; 2) decrypting the cipher encode program of the secrete key 

30 shown in Fig. 5 by means of the cipher decode program 534; 3) analyzing all the programs in the CD-ROM to replace 
the cipher decode program 534 and disk check program 533a by the program revision. Of these three ways, the third 
way is meaningless because the program decryption and program revision need much time, i.e., large cost. In addition, 
according to this invention, the cipher decode program 534 and disk check program 533a are placed in the media side 
but not in the drive side, and hence they can changed at every title or press of the CD-ROM. Accordingly, since the 

35 investment for the program decryption and cipher decryption is needed at every title, the illegal traders are unprofitable 
so that the duplication can be prevented from the economical aspect. Further, a description is made in terms of the 
second way. This invention employs a one direction function such as the RSA type disclosure cipher key shown in Fig. 
5. For example, the employment of the equation C = E (M) = Memodn is possible. Thus, even if the cipher decode 
program, i.e., one key, is in disclosure on the CD-ROM, the decryption of the cipher encode program 537 which is the 

40 other key takes incredible time and hence is substantially impossible. Although there is a possibility that the information 
on the cipher encode program 537 leaks, in the Fig. 5 method the cipher decode program 534 is present at the media 
side but not at the drive side. Accordingly, even in case that it leaks, by changing both the pair of cipher programs, the 
duplication preventing effect is easily restorable. Finally, the first way of fabricating the CLV original record having the 
completely same pattern is difficult because, although one-pulse rotational signal emerges per revolution, the current 

45 CLV mastering apparatus 529 does not include a means to detect the rotational angle with high accuracy for control. In 
this case, with the rotational angle information and recorded signal being read out from the duplication source, i.e., CD, 
to take the synchronization with the rotational pulses during the duplication, a similar pit patter can be drawn with some 
degree of positional accuracy, but not exactly. However, this is possible only in the case where the recording on the 
duplication source CD is effected at the same linear velocity. 

so In the mastering apparatus 529 according to this invention, as shown in Fig. 1 a CLV modulation signal generating 
section 10a generates a CLV modulation signal which in turn, is supplied to a linear velocity modulating section 26a in 
some case and a time-axis modulating section 37a of an optical recording circuit 37 in some case for CLV modulation. 
The linear velocity modulating section 26a modulates, at random, the linear velocity at 1.2 m/s to 1.4 m/s which are 
within the CD standard range as shown in Fig. 2A. This can similarly be realized even if the time-axis modulating section 

55 37a modulates the signal while the linear velocity is constant, in which case there is no need for the modification of the 
apparatus. Difficulty is encountered to detect with high accuracy the linear velocity modulation from the duplication 
source CD. Even the mastering apparatus which made the original record can not duplicate it, for that the recording is 
performed at random without controlled. The original record always varies. For this reason, it is almost impossible to 
completely duplicate the CD involving the linear velocity modulation according to this invention. However, since the linear 
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velocity from 1 .2 to 1 .4 m/s for CDs is in the standard range, the data is reproducible by means of the common CD-ROM 
player currently put on the market. 

Let it be assumed that ass shown in Fig. 2B, the same data is recorded on a specific optical track 65a at a constant 
linear velocity of 1 .2 m/s and, when the start point is taken as S, the end point A1 of the recorded data takes a position 

5 of 360 degrees. In this case, if as shown in Fig. 2C the linear velocity evenly increases from 1 .2 m/s to 1 .4 m/s during 
one revolution, the physical position 539a of the address A3 comes to the physical position 539a shifted by 30 degrees. 
Further, the linear velocity increases during 1/2 revolution, it comes to the physical position 539c shifted by 45 degrees. 
This means that the position is changeable by a maximum of 45 degrees during one revolution. Since the common CLV 
mastering apparatus can generate only one rotational pulse per revolution, the positional error is accumulated up to 90 

10 degrees during two revolutions. Even if in the future the illegal duplication traders carries out the rotation control, the 
positional deviation of 90 degrees occurs between the legal original record and illegally copied original record by means 
of the linear velocity modulation according to this invention. Detecting this positional deviation allows the illegally copied 
CD. The position deviation detecting resolution is set to be below 90 degrees. Accordingly, in the case where the linear 
velocity is changed in the range from 1 .2 to 1 .4 m/s, when as illustrated in Figs. 3A and 3B four 90-degree division zones 

15 Z1, Z2, Z3 and Z4 are set, the detection of the illegal CD is possible. If dividing more than four, its effect improves. 
Naturally, if a CLV mastering apparatus having an extremely high accuracy would newly be developed, the illegal traders 
can make the wholly same pit pattern. However, only several companies in the world can develop such an apparatus 
and, therefore, it is not required for the ordinary use purposes. If the shipment of such a mastering apparatus is limited 
for the purposes of protecting the copyright owner, the complete prevention of the illegal copy is possible. 

20 Furthermore, In the mastering apparatus equipped with a rotational angle sensor 1 7a as shown in Fig. 1 , the physical 
position table 532 is made out on the basis of the address information 32a of the input data and positional information 
32b on the rotational angle from a motor 1 7, and then encrypted through the cipher encoder 537 and further recorded 
at the outermost circumferential portion of the original record 2M by means of the optical recording circuit 37. Thus, the 
physical arrangement table 532 encrypted is recorded on an optical track 65 of the Fig. 5 disk 2 during the formation of 

25 the original record. Accordingly, this disk is reproducible even by an ordinary CD-ROM drive not having a magnetic head. 
In this case, as illustrated in Figs. 5 and 6, the drive is required to include a disk rotational angle sensor 335. This 
detecting means is useful if only detecting the relative position of the address 323 and 90-degree zone, and hence a 
complicated sensor such as a angular sensor is not always needed. The relative position detecting method will be 
described with reference to Fig. 4. For example, as shown in (a) of Fig. 4 the rotational pulse from the motor or the index 

30 signal from the optical sensor once generates per revolution of the disk. This interval is time-divided as shown in (b) of 
Fig. 4 so that, in the case of six-divided zones, the signal position time slots Z1 to Z6 are given. On the other hand, as 
described before the address signals 323a, 323b are obtainable from the sub-code of the reproduced signal. A signal 
position indicating signal is effective to detect that the address A1 exists in the zone Z1 and the address A2 is present 
in the zone Z3. In this case, the structure becomes simple when the rotation signal or zone signal is recorded in the sub- 

35 code, while the data can entirely be duplicated, which destroys the duplication preventing effect. Accordingly, the provi- 
sion of a means to detect the rotational angle at a place other than the optical recording section like this invention can 
offer a high duplication preventing effect. 

Returning backto Fig. 6, in the recording and reproducing system, the signal is reproduced by an optical reproducing 
circuit 38, and if the physical arrangement table 532 is present in the optical track, in the Fig. 7 flow chart the operational 

40 flow advances from a steps 471 b to 471 e. If the answer of the step 471 b is "NO", the step 471 c is executed in order to 
check whether the cipher data exists in the magnetic recording section 67. If "NO", the operational flow goes to a step 
471 r to give a permission for the start-up. On the other hand, if "YES", the operational flow proceeds to the steps 471d, 
471 e to reproduce the cipher and to start the decryption program of the cipher decoder 534 recorded on the ROM of 
the drive or on the disk for the decryption, then followed by a step 471 f to make out the physical arrangement table 532, 

45 i.e., the zone-address table (An : Zn). A step 471 w is for checking whether or not the disk check program is in the media. 
If the decision is "NO", the operational flow advances to a step 471 p. If the decision is "YES", the operational flow 
proceeds to a step 471 g to start the disk check program recorded within the disk. In the disk check program (the step 
471f), a step 471 h is first executed to set n = 0, and then a step 471 i is implemented to set n = n + 1, and further a step 
471 j is performed to search the address An of the disk 2 in the drive side for reproduction. In a step 471 k, the positional 

so information Z'n is detected and outputted by the foregoing position detecting means 335, and in a step 471m a check 
is made as to whether Z'n = Zn .If "NO", the operational flow goes to a step 471 u to decide that it is an illegally copied 
CD and further to issue an indication of "illegally copied CD" to the display section 16, then followed by a step 471s for 
stopping. On the other hand, if the decision of the step 471 m is 'YES", the operational flow goes to a step 471 n to check 
whether n = the last. If "NO", the operational flow returns to the step 471 i. If "YES", the operational flow advances to the 

55 step 471 p. The step 471 p checks whether or not the disk check program is placed in the drive side ROM or RAM. If the 
decision is "NO", the step 471 r is executed to start the soft. On the other hand, if "YES", a step 471q is implemented to 
run the disk check program. The operational content is the same as a step 471 1. Thus, if the answer is "NO", the oper- 
ational flow advances to the steps 471 u and 471s. If the answer is "YES", the step 471 r is implemented to start to 
reproduce the soft within the disk. 



22 



EP 0 706 174 A1 



In the case where the CD player which is currently in production reproduces a disk whose linear velocity varies 
between 1 .2 to 1 .4 m/s, there is not problem in reproducing the original signal. On the other hand, the mastering apparatus 
can do the cutting with a considerable linear velocity accuracy above 0.001 m/s. Thus, as the standard for the mastering 
apparatus there has been provided the CD standard in which the linear velocity = ± 0.01 m/s. If conforming with the this 

5 CD standard, as shown in Figs. 1 1 A and 1 1 B the linear velocity can increase, for example, from 1 .20 m/s to 1 .22 m/s 
within the standard. In this case, as shown in Figs. 1 1 C and 1 1 D the angular physical arrangement of the same address 
is shifted by an angle of 5.9 degrees per revolution of the disk from 539a to 539b. When as shown in Fig. 1 3 a rotational 
angle sensor 335 which detects the angle shift of 5.9 degrees is provided in the recording and reproducing system side, 
the physical arrangement difference is distinguishable. For CDs, the rotational angle sensor 335 is useful which has a 

10 resolution of 6 degrees, i.e., which angle-divides one revolution into more than 60. 

The arrangement of this rotational angle sensor 335 is illustrated in the Fig. 16 block diagram of the recording and 
reproducing system. Since a pulse emerging from a rotational angle sensor 1 7a such as a FG of the motor 1 7 is time- 
divided by a time-division circuit 553a of an angular position detecti ng section 553 of a disk physical arrangement detect- 
ing section 556, even if only one rotational pulse signal is obtainable per revolution, when for example the time accuracy 

15 is ± 5%, it can be divided into 20, which ensures the angular resolution about 18 degrees. This operation was described 
above with reference to Figs. 4A, 4B and 4C. Since for CDs an eccentricity of ± 200 \im takes place, an angle measure- 
ment error appears due to the eccentricity. In the case of a CD according to the CD standard, the angle measurement 
error of a maximum of 0.8 degrees occurs at P-P due to the eccentricity. Accordingly, if the angle measurement resolution 
of 1 degree is needed, the measurement becomes impossible. When a high angular resolution is needed in order to 

20 avoid this problem, an eccentric quantity detecting section 553c is provided in the angular position detecting section 553 
in Fig. 1 6 to measure the eccentric amount so that the correction calculation is made in an eccentric quantity correction 
section 553b to eliminate the influence from the eccentricity. A description will be made in terms of the detection of the 
eccentric quantity and the calculation of the correction amount. When no eccentricity occurs as shown in Fig. 19A, the 
center of a triangle made by three points A, B, C on one circle is coincident with the real center 557 of the disk under 

25 the condition that 6a = 8b = 9c . Actually, as shown in Fig. 19B an eccentricity 559 takes place due to the eccentricity 
of the disk and the variation in the mounting of the disk. As shown in Fig. 19B, the relative angles of the three point 
addresses A, B, C are detected by the angle sensor 353, whereby the difference L'a between the rotational center 558 
of the disk and the real disk center 557 can be calculated as L'a = f (0a, 9b, 6c) . The eccentricity correction section 
553b corrects, using the calculated eccentric amount, the rotational angle signal from the rotational angle sensor 1 7a. 

30 This can eliminate the adverse influence from the eccentricity so as to improve the accuracy so that the angular resolution 
is below 1 degree, thereby improving the detection accuracy of the illegal disk. 

In the case where the detection of the angular position is made with the resolution as low as 6 degrees as mentioned 
before, the decision between the legal and illegal disks is required to be strict. In particular, if the decision is made such 
that the legal disk is the illegal disk, the legal users suffer large damage. It is absolutely needed to avoid it. For this 

35 reason, as illustrated in steps 551 1, 551 u, 551 v of the Fig. 14 flow chart, the access to the address of the disk which has 
been decided as an illegal disk is made two or more times for reproduction and check, whereby it is possible to avoid 
the wrong decision. The basic portion of the Fig. 14 flow chart is the same as the Fig. 7 flow chart, and only additional 
portions are described and the description of the portions other than the additional portions is omitted for simplicity. 
When in a step 551 a decision is made such that the value is out of the allowable range, in the step 551t the access 

40 to the address An is again made plural times, then followed by the step 551 u to detect the zone number Z'n indicative 
of the relative angle with respect to the address An, and further followed by the step 551 v to check plural times whether 
or not the value is within the allowable range. If the decision is "YES", the disk is considered as a legal disk, and the 
operational flow goes to a step 551s. On the other hand, if the decision is "NO", it is considered as an illegal disk, and 
the operational flow advances to the steps 471 u and 471s to inhibit the operation of the program. 

45 In addition, if a statistic process is added for the prevention of the wrong decision, the decision accuracy improves. 
In Fig. 12A, in the legal original record the frequency distributions of angle-address, angle-tracking direction, address- 
tracking direction, angle-pit depth and address-pit depth read out become as illustrated in a graph (1). Accordingly, in 
the case where specific data are selected and reproduced by a player as shown in a graph (2), easily discriminable 
sample address data are selected. As shown in Fig. 12B the formed disk is reproduced to find signal sections, indicated 

so with black color, which are out of the allowable range, and further to strike the abnormal values, which are out of the 
allowable range, off a list as shown by a graph (4). Although in the illustration the frequency distribution of angle-address 
arrangement is indicated, the same effect is also obtainable in terms of the frequency distribution of pit depth or address- 
tracking quantity. This permits the copy prevention signal section hard to discriminate, i.e., easy to made a mistake to 
be eliminated from the list, which reduces the mistake during the reproduction by the reproducing player. That is, the 

55 mistake probability decreases with the access to the address of the disk decided as illegality being made two or more 
times. 

On the other hand, in Fig. 12C, in the original record illegally duplicated, since the address of the formed disk is 
read out to fabricate the original record, a copy protect signal (CP) signal generates which distributes in a given range 
at a constant probability as shown in a graph (5). In this case, since the disk physical arrangement table can not be 
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revised as described before, the data selection as seen in the graph (2) is impossible. Accordingly, in the physical arrange- 
ment of the illegal original record the data are considerably close to the limits of the allowable range or the CP signal 
exists out of the allowable range. As shown in Fig. 12D, in the optical disk formed from the illegal original record there 
occur errors due to the formation variation which cause a distribution as shown in a graph (6). In the graph (6), the 

s physical arrangement signal 552b exceeding the allowable value develops as indicated by black color. Since the physical 
arrangement signal 552b inherent in the illegal disk is detectable through the disk check program, the operation of the 
program stops, thereby preventing the use of the copied disk. The distribution of the angle-address CP signal disperses 
within a narrow range. On the other hand, in the case of the pit depth shown in Fig. 17B, the depth greatly varies in 
accordance with the cutting and formation condition, and it is considerably difficult to control this with precision. Therefore, 

ro the yield of the illegally duplicated disk at manufacturing sharply drops. For this reason, in the case of the pit depth, 
strong copy protection is possible. 

A description will be made hereinbelow in terms of a reproducing system which detects the frequency distribution 
of the disk physical arrangement as shown in Figs. 12A to 12D for the prevention of copy. As illustrated in Figs. 13 and 
1 6, the recording and reproducing system 1 is equipped with a disk physical arrangement detecting section 556 including 

15 three detection sections: an angular position detecting section 553, a track displacement detecting section 554 and a 
pit depth detecting section 555 which output a detection signal indicative of the angular position information Z'n, a detec- 
tion signal representative of the tracking displacement Tn, and a detection signal indicative of pit depth D'n, respectively. 
When they are coincident in time with the signal A'n from an address detecting section 557, it is possible to obtain the 
corresponding data representative of A'n-Z'n, A'n-Tn, A'n-D'n, Z'n-T'n, Z'n-D'n, Tn-D'n. These data are checked in a 

20 checking section 535 with An, Zn, Tn, Dn of the reference disk physical arrangement table 532 decoded by the cipher 
decoder 534. If the decision is made such that it is not a legal disk, an output/operation stopping means 536 stops the 
operation of the program. 

Further, a description will be made with a flow chart in terms of a statistic way to reduce the misjudgment for disks. 
In the flow chart of Fig. 14 the description of portions which are the same as that of Fig. 7 will be omitted for brevity. 

25 Further, the description will be limited to the decision of the illegal disk based on the frequency distributions of the disk 
physical arrangement data of the graphs (1) to (6) in Figs. 12A to 12D. First, in the disk check program 471t, a step 
551W is executed so as to check every time whether the CP (Copy Protect) decryption program, i.e., a first cipher 
decoder 534a having a one direction function (for example, RSA) calculating section 534c to decrypt the reference 
physical arrangement table 532 of the cipher decoder 534 in Fig. 16, is illegally changed or not, in order words, to check 

30 illegal revision and illegal decryption by an illegal cipher decoder, with check points being provided at given portions of 
the disk check program or application program. If "YES", the operation stops, thereby making it possible to prevent the 
illegal traders from replacing the first cipher decoder 534a with an illegal cipher decoder. This provides a higher degree 
of cipher security to further ensure the duplication prevention. Subsequently, a step 551f follows, for the angular position, 
to measure the position of a specific address and to measure the distribution state of the deviation amount with respect 

35 to the reference angle of the reference physical arrangement table 532 of the zone number. Assuming that m = 0 indicates 
that the deviation does not occur and m = ± n indicates that the zone is shifted by n, a step 551 g is executed to set 
m = -1 , a step 551 h is executed to set m = m + 1 , and a step 551 i is performed to check whether or not the angular zone 
Z'n is shifted by m. If the answer is "NO", the operational flow returns to a step 551 h. If "YES", the operational flow 
advances to a step 551j to add it to the Z'n deviation distribution list so that the deviation distribution table is drawn up 

40 in succession. If m = the last in a step 551 k, the next step 471 n is performed. If "NO", the operational flow returns to the 
step 551 h. In such a manner, the measurement is made in terms of the angular position of the specific address in Fig. 
1 6, the state tracking displacement, or the distribution states of the deviations of the pit depth and angle/address positions 
with respect to the reference. 

A step 551m of the disk check program 471t is a legality decision program wherein in a step 551 n the maximum 

45 allowable value Pn (m) for the deviation m of the angular arrangement Z'n of the address n with respect to the reference, 
which is encrypted and recorded on a magnetic recording layer or an optical recording layer, is decrypted and read out 
so as to check the a deviation distribution table 556a shown in Fig. 18 and drawn up by the physical position deviation 
distribution measurement program in the foregoing step 551f and the reference physical arrangement table 532a to 
check whether the disk is legal or illegal. After setting m = 0 in a step 551p and setting m = m + 1 in a step 551q, in a 

so step 551 r a check is made regarding whether it is within the allowable range. Checking whether being within the allowable 
range is achieved by checking whether or not the number of Z'n is smaller than Pn (m) in Fig. 18. If "NO", operational 
flow advances to the aforesaid step 551 f to again make access to the corresponding address. If "NO", a decision is 
made such that the disk is illegal. On the other hand, if OK, the operational flow goes to a step 551 s. If m = the last, the 
operational flow goes to a step 471 p, while if "NO", the operational flow returns to the step 551q. Such a measurement 

55 of the deviation distribution of Z'n with respect to Zn permits the statistic process which decides that it is an illegal disk 
when the value is out of the allowable range, thereby further reducing the probability that the legal disk is taken as an 
illegal disk, or vice versa. 

In addition, in the Fig. 14 flow chart, in a step 551a a random extractor 582 including a random number generator 
583 as shown in Fig. 1 6 supplies a partially selective signal to the cipher decoder 534 or the magnetic reproducing circuit 
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30 to select a portion of all the magnetic tracks or optical tracks, which contain a cipher, for the access and reproduction. 
Accordingly, since the access is made only to a portion of all the data, for example, about 1 00 of 1 0000, the mechanical 
access time becomes shorter to cause the time necessary for checking the duplication to become shorter. Furthermore, 
the random extractor 582 issues a selective signal the cipher decoder 534 to carry out the decryption of a portion of the 

5 cipher data reproduced. For instance, in the case of a cipher based on a one direction function of 51 2 bits, the decryption 
takes a 32-bit microcomputer approximately 1/5 second. However, the employment of this partial selective method can 
reduce the time for the decryption. Since the random number generator 584 checks a minimum of necessary sampled 
data which is different every time, even if using a system which checks only 100 of 10000 sampling points every time, 
the 10000 sampling points are finally checked. Accordingly, the duplication traders are required to duplicate the disk 

10 such that the physical arrangement of all the 1 0000 sampling points are the same as the reference disk. It is difficult to 
duplicate the angles, tracking amounts and pit depths at all the sampling points, which improves the duplication preven- 
tion effect. The addition of this random extractor 582 is able to considerably reduce the disk check time without deteri- 
orating the high duplication prevention effect. 

15 [Third Embodiment] 

A description will be made hereinbelow with reference to Figs. 13 and 16 in terms of a third embodiment which uses 
the tracking displacement and the pit depth as the first physical feature information. In Fig. 16, in the disk physical 
arrangement detecting section of the recording and reproducing system 1 , in addition to the aforementioned angular 

20 position detecting section 553, there is provided two detecting sections: a tracking amount detecting section 554 and a 
pit depth detecting section 555. The tracking amount detecting section 554 receives a tracking amount Tn at the address 
n from a tracking amount sensor 24a such as a tracking error detecting circuit which can measure the wobbling of the 
tracking control section 24 of the optical head 6, and measures the coincidence in time between the tracking amount 
and the other detection signals such as A'n, Z'n, D'n to output the result as T'n to the checking section 535. This principle 

25 will be described with reference to Figs. 20A and 20B. In the legal disk shown in Fig. 20A, the physical position 539a of 
the address A1 is modulated in the tracking direction during the formation of the original record (for example, wobbling). 
Thus, the tracking is shifted toward an outer circumferential portion. When this is defined as T1 = + 1, the physical 
position 539b of the address A2 is taken as T2 = - 1 . This information is discriminate during the formation of the original 
record or after the fabrication thereof, and therefore, after the reference physical arrangement table 532 is drawn up and 

30 encrypted, it is recorded on the medium 2. 

Secondly, in the medium 2 illegally duplicated as shown in Fig. 20B, generally the tracking displacement is not given. 
Even if the tracking displacement is given, as shown in the illustration, the tracking displacements T'1 and T'2 of the 
addresses A1 and A2 in the same angular zone Z1 give 01 + 1 , and the disk physical arrangement table 556 measured 
is different from the reference physical arrangement table 532 of the legal disk. Accordingly, the checking section 535 

35 of the disk check section 533 in Fig. 16 detects this and the output/operation stopping means 536 stops the output of 
the program, the operation of the program, or the decryption of the application program by the second cipher decoder 
534b and outputs a display signal indicative of "illegally copied disk" to the display section 16. In the case of Fig. 16, 
since the disk check program itself is encrypted by the second cipher decoder 534b, difficulty is encountered to revise 
the disk check program 533, thus increasing illegal duplication preventing effect. 

40 Furthermore, a description will be made about the pit depth detecting section. As shown in Fig. 16, the optically 
reproduced signal from the optical head 6 is fed to an amplitude detecting section 555a of a pit depth detecting section 
555, which is designed to detect the amplitude of the envelop or the variation of the modulation factor, so as to detect 
the pit depth on the basis of the amplitude variation, the detection output D'n being delivered to the checking section 
535 to be checked with the data of the reference physical arrangement table 532. If different therefrom, the copy pre- 

45 venting operation starts. Thus, as shown in Figs. 21 A to 21 D, the four parameters of the address An, angle Zn, tracking 
displacement Tn and pit depth Dn can be checked with respect to the physical arrangements 539a, 539b, 539c of one 
sampling point. Thus, it is needed to duplicate the original record which conforms with the four parameters at all the 
sampling points. It is difficult to duplicate the original record satisfying such conditions at a high yield, which results in 
realizing a great copy preventing function. In particular, duplicating a pit group whose widths are different and whose 

so depths are the same is extremely difficult and deteriorates the yield. Accordingly, the duplication is economically impos- 
sible. In this invention, as shown in Fig. 36, when in a step 584a 1000 sets of pit groups are recorded under 1000 
recording conditions different in recording output, pulse width and so on, in a step 584b the pit groups satisfying 5 sets 
of conditions are made at a given yield, for example, at 1/200 yield. In a step 564a the physical arrangements of the pit 
groups satisfying the conditions are found by the monitor of the original record by a leaser beam. In a step 584d the 

55 physical arrangement table for the satisfying pit groups is drawn up, and in a step 584e the physical arrangement table 
is encrypted, and further, if a step 584f shows the optical recording section, in a step 584g the obtained cipher is recorded 
on a second photosensitive section 572a of the original record. In a step 584h a plastic is injected to the original record 
to produce an optical disk. In a step 584i a reflection layer is formed, in a step 584j a magnetic layer is completed, if 
already completed, in a step 584k a magnetic recording section is made, and in a step 584m the cipher is recorded in 
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the magnetic recording section to complete an optical disk. The pit depth is measured after the fabrication of the original 
record, the encryption is made and the arrangement table is recorded, thereby increasing the yield up to approximately 
100% at the time of the production of the original record. 

A description will be made in terms of a detecting method of the pit depth in the pit depth detecting section 555. In 

5 Fig. 17A, pits 561 a to 561 f of an illegally duplicated disk have the same pit depth. Of pits of the legal disk shown in Fig. 
17B, the pits 560c, 560d, 560e are shallower. Accordingly, as shown in Fig. 17C reproduced pulses 562c, 562d, 562e 
have a lower peak value, and the reproduced output becomes as shown in Fig. 17F when a multi-level slicer 555b 
assumes the reference slice level SO, while the output disappears as shown in Fig. 1 7D at the detection slice level S1 . 
Accordingly, taking the logical product (AND) of the inverse value of S1 and SO, the duplication preventing signals 563c, 

10 563d, 563e are obtainable as shown in Fig. 1 7G only when the disk is a legal disk. In the illegal disk, since the output 
at the detection slice level S1 successively becomes 1 , the outputs of the duplication preventing signals do not appear. 
For this reason, the detection of the duplicated disk is possible. In addition, in this case, even if the amplitude detecting 
section 555a detects the amplitude lowering of the envelope of the optical output waveform or the lowing of the modulation 
factor and the inverse sign of S1 is obtained, a similar effect is available. 

15 As obvious from a Fig. 23 comparison table on the duplication preventing effects, since an original record fabricating 
apparatus for common CDs or MDs does not have an angle control function, the angular direction disk check, i.e., A, is 
effective. On the other hand, since an original record fabricating apparatus for laser disks (LDs), MDs and CD-ROMs is 
not equipped with a wobbling, i.e., tracking direction, control means, the tracking direction displacement, i.e., B, is effec- 
tive. In the case of the depth direction, i.e., C, in addition to the conventional circuit, a detection circuit is required which 

20 can detects the amplitude or modulation factor, and hence the detection is impossible with the existing IC for CDs. 
Accordingly, since at present A + B provides a great copy preventing effect and has compatibility with the existing IC, 
the greatest effect is obtainable for CDs and MDs. Consequently, the current original record fabricating apparatus can 
offer the greatest effect when employing the checking method based on A + B, i.e., the combination of two parameters: 
angular direction and tracking direction. 

25 Fig. 24 shows a disk original record fabricating apparatus which implements the modulation on the angular direction, 
tracking direction and pit depth direction. The Fig. 24 mastering apparatus 529 basically and substantially has the same 
arrangement and operation as the aforementioned Fig. 1 mastering apparatus, and the description thereof is limited to 
the portions differing therefrom. A description is first made in terms of the tracking modulation method. In the system 
control section, there is provided a tracking modulation signal generator 564 which supplies a modulation signal to a 

30 tracking control section 24 to perform the tracking at almost constant radius rO on the basis of a reference track pitch 
24a. The modulation such as wobbling is carried out within the range of the track radius rO ± dr. Thus, a meanderring 
track is formed on the original record 572 as shown in Figs. 20A and 20B. This tracking displacement is fed to a tracking 
displacement information section 32g of a positional information input section 32b. In the copy preventing signal generator 
565, the reference physical arrangement table 532 on the address An, angle Zn, tracking displacement Tn and pit depth 

35 Dn as described with reference to Fig. 13 is drawn up and encrypted in the cipher encoder 537. This cipher is recorded 
in a second original record area 572a provided at an outer circumferential portion of the original record as shown in 
Figs. 32 and 33 or recorded in a second original record area provided at an outer circumferential portion as shown in 
Figs. 34 and 35. In addition, the modulation Dn in the pit depth direction can individually be added. In Fig. 24, the system 
control section 10 is equipped with an optical output modulation signal generating section 566 whereby the amplitude 

40 of the laser output of an output modulation section 567 in the optical recording section 37b varies as shown by the 
waveform (2) of Fig. 30, or a pulse width modulating section 568 modulates the pulse duration or pulse separation with 
a constant amplitude as shown in by the waveform (1 ) of Fig. 30, thereby changing the effective value of the laser output. 
With this, a photosensitive section 574 having depths can be formed in a photosensitive section 573 of the original record 
572 as shown by the process (2) of Fig. 30. Through the etching process, pits 560a to 560e having different depths are 

45 formed as shown by the process (3) of Fig. 30, the deep pits 560a, 560c, 560d having depths close to A/4 and the shallow 
pits 560b, 560e having depths close to A/6. This original record 572 is metal-plated with nickel or the like so as to produce 
a metallic original record as shown by the process (4) of Fig. 30, and then plastic-formed to fabricate a formed disk 576 
as shown by the processes (5) and (6) of Fig. 30. In the case where the pits are formed on the original record by changing 
the amplitude of the laser output, since the peak value of the reproduced output decreases as shown by the waveform 

so (5) of Fig. 31 , if it is sliced with a specific slice level by a level slicer, the pulse duration tends to be detected as a smaller 
duration as compared with the case that pit depth is large, thus making it difficult to provide a normal digital output. For 
this reason, a pulse width adjusting section 569 generates a wider pulse T + AT as shown by the waveform (2) of Fig. 
31 relative to the original signal of the synchronism T as shown by the waveform (1) of Fig. 31 so that the digital signal 
is corrected as shown by the waveform (6). In the case of no correction, a sliced digital output is obtained which has a 

55 duration smaller than that of the original signal as shown by the waveform (7) of Fig. 31 , resulting in the output of an 
incorrect digital signal. 

Thus, the pit depth is modulated through the optical output modulating section 567, and the pit depth information 
Dn is fed from the optical output modulation signal generating section 566 to a pit depth information section 32h. In the 
copy preventing signal generating section 565, the reference physical arrangement table 532 on the aforesaid An, Zn, 
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Tn, Dn are drawn up and encrypted by the cipher encoder 537 and recorded on the magnetic recording layer. Or, as 
illustrated in Fig. 34, after the fabrication of an original record having at its outer circumferential portion a second pho- 
tosensitive section 577, the pit depth and so on are measured as shown by the process (5) of Fig. 34 to a physical 
arrangement table which in turn, encrypted, before this cipher is recorded in the second photosensitive section 577 as 

5 shown in the process (6) of Fig. 34 and the physical arrangement table 532, together with program softs, is recorded on 
one original record as shown in the processes (7) to (9). In the case where disks do not have different ID numbers, the 
magnetic layer is not always needed, and only the optical recording section provides the copy preventing effect in accord- 
ance with this method. Figs. 35A and 35B are a top view and cross-sectional view of an original record. It is also appro- 
priate to combine two original records as shown in Figs. 32, 33A and 33B. Further, in Fig. 24, there is provided a 

w communication interface section 578 which allow communication with the external, whereby as shown in Fig. 29, in an 
external cipher encoder 579 the soft copyright owner has, the physical arrangement table is encrypted by means of a 
first cipher key 32d and fed back from the external cipher encoder 579 through a second communication interface 578a, 
a communication line and the communication interface 578 to a mastering apparatus 529 manufactured by an optical 
disk manufacturing company. According to this method, the first cipher key 32d belonging to the copyright owner is not 

is given to the optical disk manufacturing company, which increases the degree of cipher security. In addition, in case that 
the first cipher key 32d is stolen, there is no need for the optical disk manufacturing company to take the responsibility. 

Furthermore, the precise control for the pit machining in the depth direction is considerably difficult because of 
depending on varying factors such as the sensitivity of the photosensitive material, gamma characteristic, output variation 
and beam configuration of the laser light, thermal characteristic of the glass substrate, etching characteristic, dimensional 

20 error of the pressing formation. For example, in the case of changing the pulse duration and depths of the pits as shown 
in Fig. 22, the amplitude of the laser output and the most suitable condition for the pulse duration vary at every pulse 
duration. Accordingly, taking the gamma characteristic into consideration, n combinational conditions on the laser output 
value and pulse duration are made as shown in Fig. 22. For example, several hundreds of laser output combinations 
are made to fabricate original records several hundred times under different conditions. Of these, the original records 

25 having the most suitable pit depth can be fabricated several times. That is, of the several hundreds of the original records, 
several original records satisfy the conditions. In these satisfied original records there is formed a pit group whereby, as 
shown by portions 581a, 581c of the waveform (3) in Fig. 22, the reproduced signal reaches the reference voltage So 
but not reaching the detection voltage S1 . However, the fabrications of several hundreds of useless original records cost 
a large amount of money and, therefore, this is economically impossible. Thus, this invention employs a method of 

30 forming the most suitable pits by the fabrication of one original record. As shown in Fig. 30, several hundred sets, i.e., 
n sets of 580a to 580d pit groups are respectively recorded under n sets of laser output conditions. The pit groups having 
the pit depth, pit configuration and pulse width satisfying the conditions can be obtained with the probability of some of 
n sets, for example, several sets of several hundred sets. As shown in Fig. 15, the physical arrangement table 532 of 
the pit group 580c satisfying the conditions is encrypted and recorded on the magnetic recording section of the disk 2 

35 or recorded on the second original record or the optical recording section of the second photosensitive section original 
record 572, thus making to possible to fabricate the copy preventing disk using the pit depth. In this case, as the yield 
of the satisfied pit group becomes worse, the number of the n sets of the pit group increases, while the copy preventing 
ability accordingly increases. Actually, when the total number of the pits of one set of the pit group 560 and the number 
of the kinds of pulse durations increase, the number of combinations and the yield comes to approximately one-several 

40 hundredth. Since the physical arrangement table 532 is encrypted with a one direction function as described before, it 
is impossible to revise it except that the cipher key is known. Accordingly, the duplication traders can not duplicate the 
disks except that they produce several hundreds of expensive original records. That is, the fabrication of one duplicated 
original record costs a large amount of money, and therefore it is difficult economically so that the traders will give up to 
fabricate the original record. On the other hand, even if several hundreds of kinds of 10-bit pit groups are provided and 

45 several hundred sets of the pit groups are made, the total capacity is about several tens KB, and for example, the influence 
on the capacity 640 MB of a CD-ROM is 1/10000, which results in almost no reduction of the capacity according to this 
invention. Although the illustration is made in terms of an example using a ROM disk such as a CD, it is also possible 
that a recording type optical disk such as a partial ROM is used and the physical arrangement table is encrypted and 
recorded on a recording layer of an optical RAM. This can offer the same effect. Moreover, as shown in the Fig. 37 flow 

so chart, the disk check program 584 can not be revised or eliminated except that the whole application program is decrypted 
with the disposition at 1000 places, for example, like a program install routine 584d of a program 586 of an application 
soft program, a printing routine 584e and a retention routine 584f, and hence, even if a portion of the disk check program 
585 is omitted, the remaining check program stops the operation. Thus, with the disk check program being divided into 
a plurality of portions and disposed, the illegal duplication becomes difficult. 

55 

[Fourth Embodiment] 

In the fourth embodiment, a second low-reflection (low-reflectance) section is provided as the first physical feature 
information. The formation of the second low-reflection section allows the production of a physical ID mark and the 
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detection thereof. More specifically, an area with no reflective layer is intentionally provided in a portion of an optical 
reflective layer (made of AL or the like) of a ROM optical disk such as a CD-ROM to create the physical ID. Figs. 38, 39 
and 40 are system block diagrams showing the principle of the fourth embodiment. Further, Fig. 41 shows a state of a 
physical ID inherent in a disk. As shown in Fig. 15D, 10 low-reflection sections 584, 584a to 584i which do not have a 

5 reflective film 48 are disposed radially and 1 1 reference low-reflection sections 585 are intentionally provided during the 
formation of the reflective film. When a light beam from the optical head 6 is focused on the low-reflection section 584, 
the reflected light quantity is extremely reduced as compared with the reflective section 48, Accordingly, as shown by 
the optically reproduced signal of Fig. 41 E, the signal level extremely decreases. As shown in the block diagram of Fig. 
39, a comparator 587 of a low-reflection light quantity detecting section 586 detects an optically reproduced analog 

ro signal having a lower signal level than that of an optical reference value 588 to detect the low-reflection light quantity 
section. A low-reflection section detection signal having a waveform as shown by (5) of Fig. 42 is outputted during the 
detection, an estimation is made in terms of the addresses of the start position and end position of this signal and the 
clock position. 

The optically reproduced signal is shaped and converted into a digital signal by means of a waveform-shaping circuit 
15 590 including an AGC 590a. A clock reproducing section 38a reproduces a clock signal on the basis of the waveform- 
shaped signal. An EFM demodulator 592 of a demodulating section 591 demodulates the signal and an ECC corrects 
errors, then outputting a digital signal. The EFM-demodulated signal is led to a physical address outputting section 593. 
For CDs (Q bits of subcode), an MSF address is outputted from an address outputting section 594 and a synchronizing 
signal such as a frame synchronizing signal is outputted from a synchronizing signal outputting section 595. The clock 
20 reproducing section 38a outputs a demodulated clock. 

In a low-reflection section address/clock signal position signal outputting section 596, a low-reflection section 
start/end position detecting section 599 precisely measures the start point and end point of the low-reflection section 
584 by using an n-1 address detecting section 597 and address signal or a clock counter 598 and a synchronizing clock 
signal or demodulation clock. A detailed description will be made with reference to Fig. 42 in terms of this method. As 
25 shown by (1 ) of Fig. 42 which is a cross-sectional view of an optical disk, a low-reflection section 584 is partially provided 
as a mark number 1 . A reflected light signal as shown by (2) of Fig. 42, i.e., an envelope signal as shown by (3) of Fig. 

42, is outputted, while it becomes lower than a light quantity reference value 588. A light quantity level comparator 587 
detects this fact and a low-reflection light quantity detecting section 586 outputs a low-reflection light quantity detection 
signal as shown by (5) of Fig. 42. 

30 Secondly, address information and a demodulation clock shown by (6) of Fig. 42 or a synchronizing clock are used 
in order to the start and end positions of the low-reflection light quantity detection signal. Initially, a reference clock 605 
of the address n shown by (7) of Fig. 42 is measured. If the n-1 address detecting section 597 previously detects the 
address immediately before the address n, it is found that the next sync 604 is a sync of the address n. The clock counter 
598 counts the sync 604 and the number of clocks immediately before the reference clock 605, and this number of clocks 

35 is defined as a reference delay time TD which is measure and recorded by a reference delay time TD measuring section 
608. 

Since the circuit delay time varies in accordance with the reproducing system, this reference delay time TD also 
varies. Thus, a time delay correcting section 607 corrects the time using the reference delay time TD, whereupon it is 
possible to accurately measure the number of start clocks of the low-reflection section irrespective of the reproducing 

40 system. As shown by (8) of Fig. 42, by obtaining the start, end address ■ clock number for an optical mark No. 1 of the 
next track, the clock m + 14 of the address n + 12 is obtainable. Since TD = m + 2 , the number of clocks is corrected 
to 12, while n + 14 is used for the purpose of the description. 

A description will be made in terms of a low-reflection section address table. The low-reflection section 584 is pre- 
viously measured in the factory at every disk as shown in Figs. 3A and 3B so as to draw up a low-reflection section 

45 address table 609. This table 609 is encrypted with a one direction function as shown in Fig. 44 so that as shown in Fig. 
15 a low-reflection section group having a bar code configuration and having no reflective layers is recorded at the 
innermost circumferential portion of the disk in the second-time reflective layer formation process. It is also appropriate 
that it is recorded in the magnetic recording section 67 of a CD-ROM as shown in Fig. 38. As shown in Figs. 3A and 3B, 
the low-reflection section address tables 609 and 609x considerably differ from each other between the legal CD and 

so the illegally duplicated CD. Accordingly, as shown in Fig. 38, the encrypted table is decrypted to made a normal table 
which is checked with a check program 535 to distinguish the legal disk from the illegally duplicated disk, thereby stopping 
the operation of the illegal disk. In the example shown in Fig. 42, the values of the low-reflection section address tables 
609 and 609x are different from each other. As shown by (8) of Fig. 42, in the legal disk the track next to the mark 1 
assumes the start and end at m + 14 and m + 267, respectively. On the other hand, as shown by (9) of Fig. 42, in the 

55 illegally duplicated disk, the start and end take place at m + 21 and m + 277 different therefrom. Thus, as shown in Fig. 

43, the low-reflection section address tables 609 and 609x are different from each other, thereby allowing the discrimi- 
nation of the duplicated disk. In the case of CLV, this is achieved using the fact that the address coordinate arrangement 
of the original record is different as described before. Fig. 45 shows the actual measurement results about the positions 
of the addresses of a CD. As obvious from the figure, the address coordinates are considerably different from each other. 
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Moreover, according to the method of this invention, even if the original record is the same, since the reflective film is 
partially removed in the reflective film formation process, the low-reflection section differs at every disk. Accurately remov- 
ing the reflective film partially in units of pits is almost impossible in the ordinary process. For this reason, duplicating 
the disk made according to this invention is economically satisfied, which provides a high duplication preventing effect. 

5 Fig. 30 is a flow chart for detection of a duplicated CD due to the low-reflection section address table, while the description 
thereof will be omitted because of repetition. 

Secondly, a description will be made in terms of a formation method of the low-reflection sections. In the process 
(2) of Fig. 47, a deposition preventing section 610 is placed on a substrate of a disk. In the process (3) of Fig. 47, the 
sputtering is carried out, in which case the low-reflection section 584 with no reflective layer is available. In the process 

w (4), the refractive index n1 of the substrate is made to be close to the refractive index n2 of a protective layer 611, thereby 
reducing the reflected light quantity on the low-reflection section 584. Since n1 = 1 .55, n2 is set to 3 s n2 s 1 .7. 

In Fig. 48, an ink 61 2 with a low transmission factor is applied in the process (2) and cured with UV (ultraviolet light) 
in the process (3). Further, in the process (4) a reflective film is given. Since the ink 612 has a low transmission factor, 
the low-reflection section 584 is available. In Fig. 49, in the process (2) a light shielding section 61 3 is adhered onto the 

15 substrate through an adhesive section 614, and in the process (3) a reflective film is formed by a first mask at a portion 
other than optical tracks of the inner circumferential section to make the low-reflection section 584. In addition, in the 
process (4) the position of the low-reflection section 584 is detected by the optical head 6 to draw up the low-reflection 
section address table 609, then followed by the encryption in the process (5). In the process (6), this cipher data is 
modulated to a modulated signal such as a bar code data and recorded as an optical mark on the substrate of a cipher 

20 data recording section 618 by means of a printing section 617 and the ink 612. Further, in the process (7) the ink 61 2 
is cured and in the process (8) a reflective film 48 is made by the sputtering or the like using a second mask 61 6 which 
masks portions other than the cipher data recording section 618. The reflected light quantity decreases at the ink 612 
portion, thereby forming the second low-reflection section 584. In the process (9), an envelope in which the light quantity 
partially decreases is reproduced, and in the process (10) the low-reflection section detection signal is reproduced, 

25 whereby the cipher data is reproduced by the bar code demodulating section 621 . As shown by the process (1 1) of Fig. 
49, since in addition to a bar code 620 a character pattern 622 can also be printed in the cipher data recording section 
619, the characters for the ID number can be printed at every disk, which allows visible confirmation of the ID number. 
In Fig. 50, for printing a circular bar code 620 and character pattern 622 on the cipher data recording section 619, a 
heating head 624 having a thermal transfer heating section 623 is used so as to partially perform the thermal transfer 

30 of the ink 61 2, applied onto a film 625, onto the substrate so that the ink 612 remains on the substrate as shown by the 
process (2). If necessary, an UV ink is employed and UV-cured in the process (3). In the process (4), using the second 
mask 616 a metallic reflective film is provided only in the cipher data recording section, whereby the optical head 6 is 
operated in the process (5) so as to obtain a reproduced waveform as shown by (6) in which attenuation occurs only at 
the low-reflection section, thus obtaining a low-reflection section detection signal as shown by (7). As shown in Fig. 49, 

35 the digital data is outputted from the bar code demodulator 621 so that a CP master cipher signal generates. This signal 
is different at every disk, and therefore a different physical ID is obtainable at every disk. As shown in Fig. 52 the disk 
physical ID 626 inherent in each disk, such as the low-reflection section address table 609 being the physical information 
inherent in each disk as described in Figs. 3A and 3B or a stamper physical ID 627, such as the physical arrangement 
table in Figs. 3A and 3B, and a disk managing ID 628 being a serial managing number arbitrarily given by the soft making 

40 company is enciphered as one data train with a one direction function cipher encoder so as to make the master cipher 
626. Accordingly, even if the user try to revise the disk managi ng I D 628, the change of the disk physical I D 626 is difficult, 
with the result that the revision becomes impossible. 

This disk physical ID 626 is randomly formed in the CP optical mark section 618 of the Fig. 49 disk so as to have 
an optical mark as shown in Fig. 41. When this signal is reproduced, as shown in Fig. 53, The address is divided into 

45 10 angular numbers from 0 to 9 for each optical mark to obtain 10 data so that the disk physical ID 626 of 10 figures, 
i.e., 32 bits, can be defined. Moreover, as described above the disk physical ID varies at every disk irrespective of the 
same original record, and corresponds to a specific disk managing ID 628, whereby it is possible to prevent the revision 
of the disk managing ID. This can greatly improve the password security against the release of the program. In addition, 
although a description was made in terms of the embodiment in which the position of the optical mark is detected by 

so the address and the number of clocks, the disk physical table 609 as shown in Fig. 53 can be drawn up with a low- 
reflection section angular position detecting section 602 of a low-reflection section angular position signal outputting 
section 601 outputting a low-reflection section angular position signal on the basis of a low-reflection light quantity detec- 
tion signal and disk rotational angle information of a disk rotational angle detecting section 335 in Fig. 38. 

When a writable layer 630 is provided as shown in Fig. 51 , in addition to write a password and the like by a pen, it 

55 is possible to prevent the magnetic recording section from being damaged because the writable layer 630 becomes 
thicker. With the characters and bar code for the disk managing ID 628 being printed on the writable layer 630, the ID 
is checkable at selling agents. 
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[Fifth Embodiment] 

The fifth embodiment relates to a method in which an error signal is intentionally disposed as a duplication preventing 
signal on a disk. As shown in Fig. 54, a specific error sign 632 is arranged in a specific address ■ clock section of a 

5 legal disk 2. This arrangement information is enciphered and recorded as an error sign-address table 631 on the disk 
2. This encryption information is supplied through a cipher encoder 534 to a physical ID outputting section 633. On the 
other hand, a CP error sign 632 "1 101 1001" is parity-checked with an error sign list 634 in an error CP sign detector 
633, and the address ■ clock for the error CP sign is outputted from an address ■ clock position outputting section 
635 and checked with the error sign-address table 631 by a check program 535. If the coincidence number n1 is above 

10 a given rate, a decision can be made such that it is a legal disk. This error CP sign "1 101 1001" is corrected in an ECC 
decoder 36e to be outputted as "1 101 101 1 ". Thus, the output data provides no problem. On the other hand, in an illegally 
duplicated disk 2a, since an ordinary sign 635 after the error correction is duplicated, it differs from the CP error sign of 
the legal disk 2. In this case, the output data is the same "1 1 01 101 1 as the that of the legal disk 2. However, the number 
of the error signs to be detected by the error CP sign detector 633 is small and the error-sign-address table and the 

15 arrangement of the error signs do not coincide, and hence the check program 535 decides that it is a duplicated disk, 
which stops its operation. Thus, it is possible to realize a duplication preventing disk. In this case, since the duplication 
preventing desk is made only with the change of the signal and the addition of the error CP sign detecting section 633, 
the system can have a simplified structure. 

Secondly, a description will be made with reference to Fig. 56 in terms of a method of accomplishing the copy 

20 protection (CP) using a special EFM translation table 636. In the EFM translation, the original data 637 is modulated to 
the standard sign 635 "00100001000010" which in turn, is decoded to the modulated data 638 in an EFM decoder 592. 
In the duplication preventing disk 2, a CP special sign 639 is recorded in place of the standard sign 635 for a specific 
address only. In the case of the EFM demodulation, the sign is decoded to the ordinary data 638 "01 101111". For this 
reason, distinguishing can not be made with only the output data. 

25 A detailed arrangement will be described with reference to a block diagram of Fig. 55. For the legal disk 2, a CP 
special sign detecting section 646 detects a CP special sign 6639 and a CP special sign address outputting section 641 
outputs the CP special sign address. In a legal disk checking section 535, it is checked with a CP special sign-address 
table 642 decoded by the cipher decoder 534. If the checked value exceeds a reference value nO, a decision is made 
such that it is the legal disk. Since only the standard signal 635 is recorded in the illegally duplicated disk 2a, the CP 

30 special sign detecting section 640 does not generate the CP special sign detection signal except that an error occurs. 
Accordingly, a legal disk check section decides that it is an illegal disk, thus stopping the operation. 

Thus, the employment of the EFM special translation table 636 allows the copy prevention at the stage of the mod- 
ulation signal. As compared with Fig. 54 error special sign method, the duplication becomes more difficult. In addition, 
the structure becomes simple because of the change of the signal only. 

35 

[Sixth Embodiment] 

A description will be made in terms of the sixth embodiment which involves an install managing method using the 
master cipher 629 and a dealer code. Fig. 58 illustrates an entire operational flow of a sub-cipher decoder 643. This 

40 flow chart is composed of three main steps of a soft company process step 405a, a dealer process step 405 and a user 
process step 405c. First, in the soft company process step 405a, as described in the Fig. 52 first embodiment, a master 
cipher encoder 537 in the lump enciphers an original record ID 627 inherent in the original record, a disk physical ID 
626, a disk managing ID 628 such as a serial number, and a sub-cipher decoder number ns, for example, ns = 151 , to 
make a master cipher 629. With this operation, the prevention of revision is possible. One dealer number ns is given to 

45 each dealer or service center. In each disk, a sub-cipher decoder number ns 644 (for example, ns = 151) is set in the 
master cipher 629. Accordingly, a sub-cipher 645 in the Fig. 57 disk can be encodeed only by a sub-cipher encoder 646 
whose dealer number is 151. In this disk, the sub-cipher decoder 647 is set with the ns (for example, ns = 151) and the 
master cipher 629. Accordingly, even if the encoding is tried with a sub-cipher encoder 646 different in number, the 
operation does not start. Thus, only the dealer whose ns = 151 can treat the ns=151 cipher encoder 646a for the disk 

so control such as the release of the program and setting of the number of machines to which the install is allowable. 

Furthermore, in the dealer process step 405b, a sub-management data is produced which includes the disk physical 
ID 626 and further includes the disk managing ID 628, the number 650 of machines to which the install is limited, the 
time limit 651 for use, the service password and so on. The ns=151 dealer makes a secrete of the sub-management 
data 649 and encrypts it with his ns=151 sub-cipher encoder 646a to make a sub-cipher 645. This sub-cipher 645 is 

55 recorded in the magnetic recording section of the disk 2. 

Still further, in the user process step 405c, the master cipher 629 is reproduced so that the master managing data 
648 is decoded with the master cipher decoder 534. The original record duplication is checked with the original record 
physical ID thereof, and the revision of the ID number is checked with the disk physical ID 626 and the disk managing 
ID 628. The sub-cipher decoder number 644 is decoded, and in a step 405d the sub-cipher decoder number ns (for 
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example, ns = 151) is selected. In the optical ROM section of the disk 2 there are recorded the sub-cipher decode 
programs (for example 001 to 999) and data enciphered. The specific, i.e., ns = 151 , data is reproduced therefrom and 
the ns=151 sub-cipher decoder 647 is decoded through the master cipher decoder 534. In this case, since the sub- 
cipher decoder is enciphered, the revision is impossible. The sub-cipher decoder 647 decodes the sub-management 

5 data 549 on the basis of the sub-cipher. Since the physical ID 626 is included in the sub-management data 549, the 
data revision is checkable. In addition, since the number 650 of the install-done machines, the time limit 651 in use and 
the release program number 652 are recorded, it is possible to limit the program number released and the number of 
the install-allowable machines. This setting can arbitrarily be carried out by the dealer. Accordingly, taking the selling 
situation of disks and softs into consideration, the dealers staying in areas of countries can perform the most suitable 

w setting. 

The Fig. 57 operational flow will further be described with reference to a flow chart of Fig. 58. In Fig. 58, in addition 
to a disk fabricating routine 405a for the soft company and a disk use limit routine 405b for a dealer, there are newly 
provided a program use-allowing routine 405d for the dealer and an install routine 405c for the user. First, in the disk 
fabricating routine 405a, an original record is fabricated in an original record fabricating step 41 0a and the original record 

15 physical ID such as the address-coordinate table and error -address table are extracted. A disk substrate is made on the 
basis of the original record and in a first metallic reflective film producing step 410b a physical feature different at every 
disk is made, for example, in such a manner as intermittently providing low-reflection sections with no reflective layer as 
described above, before the disk physical ID being extracted. 

A serial number generating step 410c is executed to generate a disk managing ID with a serial number different at 

20 every disk and designates a sub-cipher decoder number ns, and a step 41 Od is executed to encipher it with a master 
cipher decoder to make a disk master cipher, and further a step 41 Oe is implemented to record on each disk a recording 
number such as a circular bar code, different at every disk, in a second metallic reflective film process. Or, in a step 41 Of 
it is recorded in the magnetic recording layer before the fabrication of the disk 2. In the dealer step 405b for the next 
number ns, a step 41 Og is executed to make a dealer sub-management data 649, and a step 41 Oh is implemented to 

25 make a disk sub-cipher by a sub-cipher encoder 646 with the number ns, and further a step 41 Oi is executed to record 
it in the magnetic recording layer. 

In the next user install routine 405c, a machine ID is read out and registered in a machine ID recording area 655 of 
an install managing data 654, then followed by a step 410k to record the machine ID in an HDD and to confirm an install- 
allowable flag 653 with a basic program number that the install is permitted in the disk 2. Flags 653a, 653b and 653c 

30 show the install permissions to the machines with ID1, ID2 and ID3, respectively. In the illustration, the install is allowed 
to the machine ID1 and machine ID3. After the install, a step 410m follows to record all the install managing data 653. 
Subsequently, a step 41 On is executed to perform the operation for a new program np being installed for a fee, then 
followed by a step 41 Op to make additional install managing data 654a when the new program np is newly installed the 
machine ID1 and machine ID3. In the data, the install allowing flag 653 rises on install allowing flags 653f and 653h. 

35 This data is transmitted to the dealer. In the dealer use allowing routine 405d, a step 41 Ou is for the dealer to check the 
receipt of the fee for the program install. If "YES", the operational flow goes to a step 41 Ov to encipher the additional 
install managing data 654a with the sub-cipher encoder No. ns, and then advances to a step 41 Ow to make an install 
managing number, which in turn, is delivered to the user. The user receives the install managing number 655 in a step 
41 Oq, and decodes the cipher with the sub-cipher decoder No. ns to decode the additional install managing data 645a 

40 in a step 410s, and further install the new program in a step 410t. At this time, in a step 410x, the decoded physical ID 
data is checked with the physical ID data measured from the disk. If OK, the operational flow proceeds to a step 410z 
to start to install the program np. If the revision has been made, the physical IDs are not coincident with each other, 
thereby preventing the illegal revision. In this case, of the additional program np, the instal allowing flags 653a and 653c 
assume "1", which permits the program install for the machine ID1 and machine ID3. 

45 

[Seventh Embodiment] 

Furthermore, as the seventh embodiment, there are described a method of recording data by the second low- 
reflection section described in the fourth embodiment and a fabricating method. Fig. 5 shows a method of enciphering 

so the address-coordinate position information 532 to record it in the optical recording section of the original record. On 
the other hand, when as shown in Fig. 15 the address-coordinate position information 532 is encrypted to make a bar 
code like mask pattern to form a reflective film including a bar code like non-reflective portion, the bar code pattern is 
reproducible through the optical head 6. In this case, for the reproduction of the duplication preventing signal, it is also 
possible that the optical reproduction surface and the protective layer 61 0 opposite thereto are made to be transparent 

55 and, in addition to the optical head 6, an optical sensor is provided at the opposite surface side to read out the bar code. 
Further, when the clock signal is designed to be reproduced from the bar code to perform the rotational control of the 
motor, a constant speed rotation of the motor is possible at recording to the magnetic recording section. As shown in 
Fig. 46 the address position of the copy protect optical mark and the pit arrangement are detected to distinguish between 
the legal disk and the illegally duplicated disk to remove the illegal disk. Although an RSA function is employed as the 
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cipher function, it is also appropriate to use an elliptical curve function or DES function instead. In Fig. 59, the angular 
position relationship between the optical mark 387 and the address position vary at every disk. Therefore, it is also 
possible that the angular difference is treated as the disk physical ID. 

The seventh embodiment employs a method different from the fabricating method of the fourth embodiment. That 

5 is, as shown in Fig. 60 the bar code like low-reflection section 584 is made by means of a laser trimming device. In a 
first laser trimming process shown by (3) and (4), a light beam from a laser 643 is operated to take a scanning movement 
through a laser scanner 644 to make a non-linear pattern 653 so that a low-reflection section 584 is formed in the process 
(4). According to this invention, as shown by (3) the laser cutting is made zigzag but not linearly. For this reason, in this 
invention the low-reflection section is detected in units of 1 T, and for the duplication of the disk according to this invention, 

10 it is required that the cutting be made in units of pits, i.e., with accuracy below 0.8 urn in both the vertical and horizontal 
directions. On the other hand, since the accuracy of the general-use laser scanner is above 10 |xm, the duplication of 
the non-reflective section 584 is impossible through the equipment commercially available. 

As well as in Fig. 49, as shown in Fig. 61 an ID mark is made at random by the laser trimming in the process (3) 
and the address of the ID mark and the clock number are detected in the process (5) and these data and the logical ID 

15 are enciphered in the lump. In the second laser trimming process (6) this cipher is recorded as a pulse width modulated 
signal such a bar code, with the result that the disk ID number different at every disk and impossible in revision is formed 
in the optical recording section of a CD. As shown in Fig. 67, in the process (2) the physical arrangement information 
532 of the original record is in advance detected and encrypted through the cipher encoder 537 so that a CP bar code 
signal is made in a pulse width modulating section 656. Further, in the process (3) a portion of the inner circumferential 

20 section or outer circumferential section of the original record completed is removed by means of the laser trimming to 
provide a portion with no pit at the pulse width of the CP bar code signal. Only data comprising 0s arranged successively 
is reproduced from this area. In the process (7) the bar code pulse duration is measured in a PWM demodulating section 
621 , thus demodulating the copy protect data. The user can detect the duplicated disk in this way. Further, as well as 
in Fig. 32, as shown in Fig. 68 the disk 2 is completed from the first original record 573 in the process (6), and the physical 

25 arrangement information 532 of the first original record 575 is encrypted and recorded so as to fabricate a second original 
record 575a. In addition, in the process (8) a transparent layer whose thickness is 30 urn is provided on the first reflective 
film 48, and pits are formed on the basis of the second original record 575a in accordance with the well-known 2P method 
before the second reflective film 48a is formed. Thus, the physical arrangement information 532 of the first reflective film 
48 is recorded on the second reflective film 48a, which can realize a highly duplication preventing disk. 

30 A detailed description will be made with reference to Figs. 39 and 97 in terms of a recording method and detecting 
method for the second low-reflection section 751a recorded in the recording medium 2. First, as shown in Fig. 97 a 
plurality of second low-reflection sections 751 are set in a TOC area 752 of the recording medium 2. Due to the presence 
of the second low-reflection sections 751 , data error takes place. That is, the area of the second low-reflection sections 
751 is excessively large, there is a possibility that the normal signal does not develop. As means to avoid this, this 

35 invention employs two ways. The first way is, as shown in Fig. 97, to provide an area 758 with no second low-reflection 
sections on a track including the second low-reflection section area 759. In this case, the area 758 with no second low- 
reflection sections is required to be larger than a 1 -track TOC information area 760. Thus, even if the data is not decoded 
at all from the second low-reflection section area 759, the data is completely reproducible from the second low-reflection 
are 760. Accordingly, assuming that the length of the area 758 on the track is taken as dN and the length of the 1 -track 

40 TOC information area on the track is taken to be dT if dN > dT, the TOC data corresponding to one track is reproducible. 
If the reproduction is surely made with one revolution, only dN > 2dY is required as a condition. Since for CD-ROMs 
only the data corresponding to one track is recorded in TOC, if dN > 2dT, the TOC data can surely be reproduced with 
one revolution. In the case of the CD-ROM, since dt = approximately 15 mm, as long as the portion not having second 
low-reflection section is provided by length of about 3 cm in one revolution, all the remaining portions can be used for 

45 the bar code serving as the second reflection section. 

Secondly, a description will be made in terms of the interval dr between the second low-reflection sections 751a 
and the like in the second low-reflection section area. If the interval is excessively made narrow, the frame synchronizing 
signal is difficult to detect, so that the rotational control becomes impossible. For instance, the second reflective section 
is about 1 0 microns in width. For Cds the interval between the frame synchronizing signals is 1 80 microns, and therefore, 

so if dr is 36 microns, the probability that the frame synchronizing signal is broken is 1/4 so that the rotation servo operates. 
One of two frame synchronizing signals is needed. Accordingly, assuming that the average width of the second reflective 
section is taken as dw, if at least dw < dr, the rotational control becomes possible. 

The second way is that, in the case where the data amount to be recorded in the second low-reflection section 751 
is small, the interval 753, i.e., dr, between the second low-reflection sections 751 is set to be larger than the interleaving 

55 length dl, i.e., dr > dl. This allows the correction of the data error. 

Moreover, a description will be made with reference to Fig. 97 in terms of a method of recording the ID number and 
a secrete key 771 such as the RSA cipher for the cipher communication. In the Fig. 97 recording system, a mixing means 
548 mixes the first physical feature information, ID number, and the secrete key 771 from a secrete key generating 
means 761 , which the mixture is in the lump enciphered in an encryption means and modulated in a PWM, or bar code, 
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modulating means 763. In addition, a portion of the reflective film is removed by means of a recording means 762 such 
as the aforesaid laser trimming device, thereby creating the bar code-like second low-reflection section 751 as shown 
in Fig. 61 . For the reproduction, the reproduced signal from the optical head is demodulated by a PWM, or bar code, 
demodulating means 763 and the secrete key is separated therefrom in a secrete key outputting section 765 so that the 

5 secrete information such as the code figure of a credit card to be transmitted is outputted from a communication data 
outputting section 767. The secrete information is enciphered with the secrete key 771 in a cipher encoder 767 having 
a one direction function such as the RSA function to create the second cipher, which is transmitted from a communication 
section 768 through a communication line 774 such as an internet to a second computer 770. 

In the second computer 770, a communication section 769 receives the second cipher and a cipher decoder 774 

w searches the secrete key 771 from an ID number 776 of a corresponding table 775 to decode the second cipher on the 
basis of the secrete key 771 . In this way, the code figure of credit card of the user is available in the second computer 
770. The internet provides a problem in that the data security is low. However, according to this invention, a unique ID 
number and the communication secrete key independent of the ID number are recorded in the CD-ROM delivered to 
the user, whereupon the user can order a product to the second computer in accordance with a catalogue for shopping 

15 or the like included in the CD-ROM and, when giving the code figure of the credit card, send the information enciphered 
with the secrete key. On the other hand, the second computer can surely decode it with the secrete key 771 of the 
corresponding table 775. In the case of using the CD-ROM, the internet security drastically improves. 

[Eighth Embodiment] 

20 

In the eighth embodiment, the inphase and negative-phase (antiphase) pits are detected as the second physical 
feature information. As shown in Fig. 62A, when detecting the address An, a control section 10 supplies an on-track 
switching signal to a tracking control circuit 24, and a track servo polarity inverting circuit 646 inverts the polarity of a 
tracking servo circuit 24a, there results in the change from the on-tracking state, i.e., traveling state on pits 46, as shown 

25 in Fig. 62B to the reverse polarity servo state as shown in Fig. 62C. Further, since a pattern comprising pits 46a and 
46b is controlled to be located at ends of optical sensors 648a and 648b, the light beam travels between the two adjacent 
tracks. As shown in Fig. 62C, when the pits 46a and 46b of the adjacent tracks are in phase with each other, the crosstalk 
signals thereof are emphasized to produce an inphase reproduced signal 650. When being not in phase with each other, 
the normal signal does not occur. In particular, in the case of being 180-degree out-of-phase, the crosstalk signals are 

30 cancelled each other so that a signal whose amplitude does not vary is reproduced. 

As shown in Fig. 63, when the off-track signal of all the data is reproduced from a CD, a plurality of pits 46 of the 
adjacent tracks are completely coincident and in phase with each other at an extremely low probability. In this area the 
continuous inphase signal blocks 653a, 653b and 653c are detectable for a given time period Ts. When jumping from 
a specific address An to an off-track, only the inphase blocks 653 are selected and extracted which reach the frame 

35 sync signal 654a of the inphase block S1. Further, the address An, arrangement angle 6n and inphase reproduction 
codes 652a, 652b are stored in the original record physical ID table 532. This table is recorded in a bar code-like non- 
reflective section of an optical ROM section of the CD, or recorded in the magnetic recording section. For the reproduction 
of the CD, the original record physical arrangement table 532 is reproduced from the magnetic reproducing section of 
optical reproducing section in Fig. 62 and fed to the checking section 535. As shown in Fig. 63, on the basis of this data, 

40 the angle is set to 0 at the address Ak and then the jumping to the off-track is made at the address A1 . The frame sync 
signal 654a is detected and at this time the angle 81 is measured. Simultaneously, the inphase reproduction code 652a 
"100010001001" and the negative-phase reproduction code "0000000'' are reproduced. The checking section 535 
checks whether or not the measurement data is coincident with the original record physical ID table 532. If not coincident 
therewith, the output/operation stopping section 536 stops the operation or output of the program. A similar check is 

45 made to the inphase block 653b of the address A2 so as to check whether or not the angle 92 of the frame sync signal 
of the inphase reproduction signal and the inphase reproduction code 652 "10010010001" coincide with the original 
record physical ID table 532. 

In Fig. 63 method, the check is made as to whether or not the inphase reproduction code 652 of the inphase block 
is in coincidence. For duplicating this portion, the pit positions of the adjacent tracks are needed to be precisely formed 

so with the accuracy of period T = 0.5T at a frequency of 4.3 MHz. This accuracy is impossible except that the original 
record is cut at CAV. At the same time, the angular position On of the frame sync signal 654a is measured. The portion 
between the inphase blocks 653a and 653b is recorded with CLV. Accordingly, the high-accuracy recording is required 
with CLV for the coincidence of the angular position en. That is, for the angle en being completely coincident with the 
inphase reproduction code, CLV control is made with the accuracy of 0.5T to fabricate the original record. Thus, realizing 

55 this by the existing systems is impossible, and the combination of the angle 6n and the inphase reproduction code allows 
the prevention of duplication of the original record. 

In Fig. 63, the frame synchronizing signals 729a and 729b of the two adjacent tracks become in phase with each 
other, and the area in which the inphase frame synchronizing signal 654a is detectable is found and used as the first 
physical feature information. As shown in Fig. 93A, because of CLV recording, as the rotational angle e increases, the 
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number of the recording pulses per one revolution increases as indicated by a curve 730a. In the case of the disk 
manufactured with CAV, the motor rotates at a constant speed, which allows the duplication of the recording signal with 
accuracy of 0.5T. On the other hand, in the case of the disk manufactured with CLV, the operation is performed at a 
constant linear velocity, and hence it is impossible to accurately duplicate the angles at which the pits are arranged. 

s Since the disk of this invention is manufactured with CLV, it is impossible to achieve the high angular accuracy by the 
ordinary original record fabricating apparatus for CLV or CAV when manufacturing the disk. However, in Fig. 93A, if, 
taking note of the fact that the number of the recording pulses between a pair of inphase recording signals 731a and 
731 b at the points A and B separated by one revolution is nO, a constant rotational angular velocity by which the number 
of recording pulses per revolution becomes just nO is calculated and the system is switched from CLV to CAV only in 

ro the A-B area so that the motor rotates at a speed for CAV and the CAV recording is made only in the A-B area, the 
recording corresponding to the curve 730b becomes possible. That is, if a CLV/CAV switching type original record fab- 
ricating apparatus is developed in future, the duplication of the points A and B would be possible with accuracy of 0.5T 
in the two-point system, while the life, i.e., the time period from the elimination of the protect to the release of a pirate 
edition, lengthens from 3 years to 5 years. 

15 Fig. 92 illustrates a three-point coincidence system taken when there is a need for a higher protect level. In the 
three-point coincidence system, the first physical feature information is obtained from an inphase area 732 in which 
three frame synchronizing signals 729a, 729b, 729c of the adjacent tracks 727a, 727b, 727c are arranged in phase with 
each other. Although the probability that the three frame synchronizing signals are in phase with each other is low, 
according to the probability calculation, there are 63 areas per disk in the case of CD-ROM. In other words, there are 

20 several areas on any CD-ROM. Thus, it is possible to use the three-point coincidence system, i.e., employ the two 
inphase frame signals as the first physical feature information. 

A description will be made in terms of a detection method similar to the Fig. 63 method. In the pit arrangement 
shown by (1) of Fig. 92, In response to the detection of a mark signal 726a subsequent to a specific An address 725a 
in a track 727a, the tracking is jumped toward the outer circumferential side and the polarity of the track servo is inverted 

25 as shown in Fig. 62 to carry out the off-track travelling, thereby jumping to an off-track 728a between the track 727a and 
a track 727b. Thus, the off -track section of the inphase signal area 732 is reached so that an inphase frame synchronizing 
signal 654a is outputted as shown by a waveform A in (2) of Fig. 92. The frame synchronizing signal has a maximum 
pit length of 1 1T and, hence, is easily distinguishable from other pits. In a reproduced clock waveform shown by (4) of 
Fig. 92, checking is made as to whether or not the count number ns of pulses from a mark signal 726a of a reproduced 

30 clock signal 733 is coincident with the number of pulses 734 in advance included in the first physical feature information 
in Fig. 63, whereby it is possible to prevent another inphase frame synchronizing signal from being detected in error. 
After the detection of the inphase frame synchronizing signal 654a, the jumping is made from an on-track 728a to an 
on-track 727a at the outer circumferential portion to confirm an address 727d, i.e., Ap + 1 , whereby confirmation can be 
made such that the detected inphase frame synchronizing signal 654a is an inphase signal of the tracks 727a and 727b, 

35 thus improving the security. 

Furthermore, a description will be made in terms of a method of detecting an inphase frame synchronizing signal 
654b between the tracks 727a and 727c. After the detection of the address 725a in the pit arrangement shown by (1) 
of Fig. 92, the jumping is made to a track in the inner circumferential side and the polarity of the track servo is reversed 
and the travelling is made on the off-track 728b, whereby as shown by a waveform B in (5) of Fig. 92 the inphase frame 

40 synchronizing signal 654b is detectable as long as it is a legal disk. Subsequently, the jumping is further made to a track 
727c closer to the outermost circumferential portion and a given address 727e is detected, whereby it is possible to 
confirm the off-tracking between the tracks 727a and 727c. This permits the detection of the inphase frame synchronizing 
signals at three points. 

As shown by a curve 730c in Fig. 93B, the inphase signals are arranged at three points at an interval of 360 degrees 
45 with accuracy in unit of submicron, while the number of recording pulses is nO between A and B and nO + AnO between 
B and C. Accordingly, in the case of performing the CAV recording, although the portion between A and B is duplicable, 
the portion between B and C takes the curve 730d whereby the point C is not duplicable (only the point C is duplicable). 
That is, the number of recording pulses lacks by AnO and hence difficulty is encountered to duplicate this by the CAV/CLV 
switching type original record fabricating apparatus. Thus, the three-point coincidence method increases the degree of 
so difficulty in duplication to more effectively prevent the fabrication of the pirate optical disk. 

Fig. 94 is an illustration for describing the degree of difficulty in duplication in the case that a track in which two 
inphase recording signal areas exist in one revolution is used as the first physical feature information, which is higher 
than the degree of difficulty in the two-point coincidence system. In the case of the three-point coincidence system shown 
in Fig. 93B, the degree of difficulty in duplication becomes high, while the duplication maybe possible with a clock control 
55 system being incorporated into the CAV/CLV switching type. However, in Fig. 94, if in addition the points A and B, the 
points C and D are provided in one revolution as indicated on a curve 730e to constitute a four-point coincidence system, 
a technique is required which measures the point C with angular accuracy of 10-7, whereby the duplication becomes 
extremely difficult. In addition to the aforementioned clock control system there is needed an angle detecting means 
with an extremely high accuracy, which relies on a technique which would be developed in future. Thus, if as shown in 
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Fig. 94 the four-point coincidence system is employed, i.e., two or more areas including the inphase recording pits are 
provided in one revolution and used as the first physical feature information, the duplication becomes extremely difficult. 

[Ninth Embodiment] 

5 

The ninth embodiment involves the detection of dirt or dust on a disk. As described above, a disk such as a CD 
according to the embodiment of this invention has a magnetic recording layer on its label surface. When as shown in 
Fig. 64A foreign substances 655a, 655b, 655c such as dust exist on the magnetic recording layer, the recording char- 
acteristic deteriorates, In a reproduction output detecting section 657 in Fig. 40, the reproduced output and a reproduction 

w output reference value 658 are compared with each other, by which comparison the deteriorating state is detectable. In 
this case, since the relative angle is found by a disk rotational angle detecting section 335, the position of the track, on 
which the foreign substances 655 are present, and the angular position OD are detectable. With the position of the 
optical surface and angular deviation of the printed label being recorded on the magnetic recording layer, it is possible 
to calculate the angle of the output-lowering portion on the label-printed surface. In addition to the label-printing angles, 

15 the reproduced-output lowering sections 659 are displayed as the output-lowering marks 660a, 660b, 660c on a window 
567 of a display section 1 6 as shown in Fig. 64B, whereby the user can recognize the places at which the foreign 
substances 655 exist and can easily remove the foreign substances 655. If the coordinates defined by vertical lines 1 
to 7 and horizontal lines A to G are set in both the disk 2 and the display section window 567. Fig. 65 illustrates an 
example of an error message to the users on the windows 567a and 567b. Fig. 66 illustrates a foreign substance cleaning 

20 instruction routine in detail. In Fig. 66, in the case of recording a track Tn in a step 471a, a step 471d is executed to 
reproduce the track Tn and a step 471 f is then executed to check whether or not the output of a reproduced-output 
detecting section 657 is above a reference value. If being below the reference value, the operational flow goes to a step 
471 i. If this is the first time, a step 471j is implemented to display the Fig. 65 error message for disk cleaning, before the 
disk is ejected. Further, the operational flow returns to the step 471d. If the output level is above the reference value, 

25 the recording is performed. On the other hand, if not above the reference value, the operational flow advances to a step 
471 r to have the disk again cleaned by the user. If the reproduced output is not restored irrespective of cleaning it three 
times, the operational flow proceeds to a step 471 x to abandon the track Tn. At the same time, the data is recreated 
from the interleave data on another track and recorded on a new track Tn + 1. Thereafter, the recording or reproduction 
is completed in a step 471 z. 

30 

[Tenth Embodiment] 

In the tenth embodiment, an offset signal is detected as the second physical feature information. As shown by a 
waveform (2) of Fig. 31, the pulse width of the signal is changed on the basis of the offset signal during the cutting of 

35 the original record for change of the duty ratio, whereby an offset voltage AVs develops as shown in a waveform (5). 
This is detectable by detecting the difference, i.e., the offset voltage AVs, between the reference slice level voltage and 
the slice level voltage from a slice level Vs outputting section 38b of a waveform-shaping circuit 38a in Fig. 40. In Fig. 
38, the offset voltage arrangement information of the disk physical configuration table 532 is checked with the angular 
position or address arrangement from an offset voltage detecting section 660, whereby the detection of an illegally 

40 duplicated disk is possible. 

[Eleventh Embodiment 

A description will be made in terms of a method of stopping the operation of a program on a pirate disk and a method 
45 of stopping the operation of a program illegally copied. Since it is designed to be treated in a CPU 665 of a personal 
computer 676 including a disk drive as shown in Fig. 69, the description is made of the difference in hardware from Fig. 
40. In Fig. 69, a second demodulator 662 different in system from an M FM demodulator 30d is provided as a demodulator 
of the magnetic reproducing circuit. The switching between the second demodulator 662 and the MFM demodulator 30d 
is made through a switching section 661 . Since the corresponding modulator is placed only in the factory, the reproduction 
so is possible but the complete recording is impossible. For this reason, in the case where the area specially modulated in 
the factory is recorded, the specially modulated signal is not recorded. In the drive side, the control is made by the CPU 
665 such that the recording is impossible except that the specially modulated signal in the area is reproduced. Accord- 
ingly, it can be considered as a logical "write once" area and the recording can be done once. If the machine ID is 
recorded in this area, it becomes difficult to revise it by the user's drive. This prevents the install from being made to 
55 machines whose number is larger than the number of the machines allowed. In addition, the prevention of the start-up 
or operation of the program with the same ID number is monitored through an HDD of a second personal computer 663 
connected through an interface 14 to a network 664, thereby preventing the operation of the soft illegally copied. The 
operation of the CPU 665 including the foregoing operation will be described with reference to a flow chart. 



35 



EP 0 706 174 A1 



Fig. 70 is a flow chart for describing the operation for installing a program. After the confirmation of the insertion of 
a disk in a step 666a, in a step 666b the install starts in response to an install instruction. In a step 666c the display on 
the user's name and user's environment is made on an input screen so that the user inputs at least the user's name. If 
inputted, the operational flow goes to a step 667, acting as a legal disk checking routine, where check is made as to 

5 whether it is a leal disk or a pirate disk. A detailed description will be made with reference to Fig. 72. The control enters 
into a check routine 667a, then followed by a step 667b to reproduce the optical disk, more specifically, to reproduce a 
serial number enciphered with a one direction function and recorded in the optical disk and different at every disk, and 
the information on the cipher decoder. In a step 667c, this cipher is converted into a plain text (non-ciphered text) through 
the cipher decoder so as to obtain the ID number and physical feature information designated at 532 in Fig. 38. In a 

ro step 667d the disk physical feature information is measured to obtain the measured physical feature information which 
in turn, is checked with the aforesaid plain-text physical feature information. The detailed description will be omitted 
because of being made above. A step 667e is for checking whether or not the check result shows the coincidence. If 
not, in a step 667f the display indicative of "duplicated disk'' is made on the screen and the program is stopped. On the 
other hand, if "YES", the operational flow proceeds to a step 668 to implement the machine ID check ■ fabrication ■ 

15 recording routine. A detailed description of this step will be made with reference to a flow chart of Fig. 73. First, in a step 
668a all the machine ID numbers installed are read out from the magnetic recording section, i.e., a write once layer 679 
in Fig. 76, of an optical disk, and then the ID number inherent in a personal computer and recorded in an HDD or ROMIC 
of the personal computer is read out so as to be checked with the machine ID numbers. If the decision result of a step 
668b indicates the coincidence, the operational flow goes to a step 668m to exit from this routine. On the other hand, if 

20 no coincidence, a step 668c is executed to confirm, from the magnetic recording section, whether or not there is still 
present the flag indicating the remaining number of times of install to machines. If the answer of a step 668d is "NO", 
the operational flow goes to a step 668e so that the operation stops. On the other hand, if the answer is "YES", the 
operational flow proceeds to a step 668f to check whether or not the machine ID is present in the personal computer 
body or HDD. If "YES", the control jumps to a step 668h. If "NO", a step 668g is implemented so that the random number 

25 generator generates the machine ID which is recorded in the HDD. The next step 668h is executed for checking whether 
or not the install of the soft into the HDD has been completed. If "NO", the control jumps to the step 668m. In this case, 
there is no pass. On the other hand, if "YES", a new machine ID for this personal computer is recorded in the magnetic 
recording section, i.e., write once layer 679, of the optical disk. If OK in a step 668j, the operational flow goes to the step 
668m to exit from this routine. In this routine, because of the use of the write once layer 679, the user's drive can not 

30 revise the machine ID, which prevents the illegal dubbing. Thereafter, the operational flow goes to a step 666f in Fig. 
70. The install operation starts in a step 666g and the legal cipher decoder checking routine is implemented in a step 
669x. This routine will be described in detail with reference to Fig. 74. A step 669a is executed to read out the cipher 
decode program recorded in the program installed and a step 669b is subsequently executed to read out specific 
encrypted data from the program or HDD, then followed by a step 669c to convert the data into a plain text through the 

35 cipher decode program. A step 669d is implemented in order to check whether or not it is right. If right, in a step 669f 
the plain-texted data is incorporated as a portion into the program a for operation. The operation is checked in a step 
669g. If it is not good, the operational flow advances to a step 669h to stop the program. If OK, the control advances 
through a step 669i. In this case, the operational flow returns to a step 666h in Fig. 70 wherein, checking the install- 
allowable flag 653 described with reference to Fig. 58, and if, for example, the third install-allowable flag is vacant, the 

40 figure of the basic program number "00000001 " is taken up one place so as to issue the program licence ID number IDn 
"000000013" which in turn, is given to the program to be installed in the HDD before recorded. When the install of the 
program is completed in a step 666i, a step 666j follows to check whether or not the machine ID for this personal computer 
has been recorded in the HDD and optical disk. If "YES", the operational flow proceeds to a step 666k. If "NO", the 
operational flow advances to a step 668x to perform the machine ID check ■ Drawing-up ■ recording routine and then 

45 carry out the operation which has already described with reference to Fig. 73. Although the same explanation will be 
omitted, since at this time the basic install has been completed, the answer of the step 668h turns YES whereby the 
new machine ID is recorded in the magnetic recording section of the optical disk in the step 668i. In addition, when the 
step 668j decides the completion, the control passes through the step 668m to exit from this routine. Thereafter, the 
operational flow returns to the step 666k to record the user's name on the write once layer 679 in Fig. 76 and to record 

so the environment setting information on a rewritable layer 680. Since the user side drive can not revise the user's name 
as described above, it is possible to expose the illegally copying person and hence to provide the copy preventing effect. 
In a step 666m, the physical address arrangement of the installed program in the HDD, for example, the start/end FAT 
information and/or the mark information of the install ID, is recorded in the HDD and used as the copy detection infor- 
mation afterwards. If OK in a step 666n, the operational flow goes to a step 666p to eject the disk and then to a step 

55 666q to complete all the install. According to this invention, the disk check allows the elimination of the pirate edition, 
and the check on the replacement of the cipher decoder improves its security. 

The operational flow subsequent to Fig. 70 will be described with reference to Fig. 71. With the above operation, 
the program is once installed in the HDD 682 in Fig. 69. When the start-up instruction for this program is inputted in a 
step 671 a, an illegal copied-soft use stopping routine is operated in a step 670x. A detailed description of this sub-routine 
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will be made with reference to Fig. 75. The operation comprises four blocks: a routine 672 for stopping the operation of 
the soft with the same ID number, a program movement detecting step 673, a machine ID checking routine 674 and a 
cipher decoder checking step 675. First, a description is made in terms of the block 672. A step 672a is executed to 
read out the licence IDn of the program previously given from the optical disk, and a step 672b is implemented to check, 
from the network 664 by the network section 1 4 in Fig. 69, whether or not the program with the same IDn is in operation 
in the HDD of the second personal computer 663. If the program with the same IDn is found in a step 672c, the operational 
flow goes to a step 672d to display the massage " operation is not allowed because the soft with the same ID number 
is in operation" on the display section 1 6 and to stop it. On the other hand, if "NO" indicative of no same I D, the operational 
flow advances to a step 673a to reproduce the arrangement information Ac such as the FAT information of the program 
in the legal HDD or a legal mark Mc recorded at a portion other than the program area during the legal install. In a step 
673b, the arrangement address such as the FAT of the program in the HDD is measured to obtain Ap or reproduce the 
legal mark Mp, then followed by a step 673c to check Ac = Ap or Mc = Mp . If the answer is "NO", since at least it is 
considered that the program is moved to another HDD, a step 673d follows to display "re-insertion of optical disk. If the 
optical disk is not inserted in a step 673e, the operation stops. On the other hand, if inserted, the legal disk checking 
routine described with reference to Fig. 72 is implemented in order to check whether it is a legal disk. In addition, in a 
step 673g check is made as to whether the ID number of the program is coincident with the ID number of the optical 
disk. If OK, the operational flow goes to a step 674a to reproduce the legal machine ID given to the program, which is 
checked with the machine ID of the personal computer in which the program is stored or the machine ID of the HDD. If 
"NO", the control enters into a step 674c, i.e., the machine ID check ■ draw-up ■ recording routine 668 described with 
reference to Fig. 73. The machine ID is checked and newly recorded. If the answer of a step 674d is "NO", the operation 
stops. If OK, the operational flow goes to a step 675a to check the cipher encoder. This routine is the same as that of 
Fig. 74, and the description thereof will be omitted. When the answer of the step 674b is "NO", this means that the cipher 
decoder is replaced. Accordingly, a step 675c is executed to display "no install from legal disk" and the operation stops. 
If the answer of the step 674b is OK, the operational flow goes to a step 670a and further advances to the next step 
671b in Fig. 71. The program is started in a step 671 w. If OK, in response to a file reading instruction in a step 671c, 
the illegal copy use stopping routine is also activated in a step 670y. If OK, the file is read out in a step 671 e. Further, 
when a step 671f decides a print instruction and a step 671 h decides a file save instruction, the illegal copy soft use 
stopping routine comes into operation. If OK, the printing or file save operation is put into practice. Thus, since the soft 
copy is checked at the time of each instruction, it is possible to stop the use of the soft illegally copied into another 
personal computer in a network. The combination of the copy preventing method and pirate edition preventing method 
based on a one direction function in this invention provides a high degree of security. 

[Twelfth Embodiment] 

The twelfth embodiment is made in connection with an MPEG scramble release key. Fig. 77 illustrates an MPEG 
scramble encoder. The MPEG image compressed signal is divided into a variable length sign section 683 of an AC 
component and a fixed length sign section 684 which are respectively equipped with random number adding sections 
686a and 686b for scrambling. In this embodiment, a scramble release signal of a key 687 is enciphered through an 
cipher encoder 689a. In addition, a portion of a compression program of an image compression control section 689b is 
compressed by an cipher encoder 689b. For this reason, it becomes difficult that the duplication traders replace the 
cipher encoders. 

Fig. 78 illustrates an enciphering arrangement for a parameter of a compression parameter section 691. Fig. 79 is 
a flow chart for a reproducing system. In steps 681a and 681b the cipher encoder on the one direction function and the 
cipher are reproduced from a TOC section of the optical disk, and in a step 681 c the cipher is converted into a plain text 
by means of a decoder to obtain the physical feature data. In addition, the disk physical feature is measured. If OK, the 
reproduction starts in a step 681 f. Then, a step 681 g follows to reproduce the cipher of the scramble key and expansion 
key, and a step 681 h further follows to convert the ciphers and the image expansion program into a plain text. If a step 
681 i decides that these are right, a step 681 j is implemented to scramble-release a scramble image signal, and a step 
681 k is executed to expand a compressed image signal. If a step 681 m decides that the expansion is correct, the repro- 
duction continues in a step 681 p. 

In the case of this embodiment, it is strictly required to prevent the one direction function cipher encoder from being 
replaced. In the Fig. 79 method, since a portion of the image compression program is encrypted by the same cipher 
encoder, the replacement of the cipher encoder is impossible except that the image compression program or compres- 
sion parameter is released, thus improving the security. 

[Thirteenth Embodiment 

The thirteenth embodiment relates to a system wherein a plurality of cipher decoders comprising one direction 
functions such as an elliptical function is stored in a ROM of a drive and a cipher made by keys of a plurality of cipher 
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encoders is converted into a plain text. This will be described with reference to a flow chart of Fig. 83. In a step 693a all 
or a portion of the data contents are enciphered by first to mth sub-cipher encoders to produce Cs1 to Csm. In a step 
693b, or in a step 693c in the case of recording before TOC, the data including this cipher is recorded in a first recording 
area of the original record, and in a step 693e the disk physical feature information is measure as described before. 
Further, in a step 693f the physical feature information and sub-cipher decode information are transmitted through an 
internet communication line to first to nth master encrypting apparatus. In the first master cipher center of the first to nth 
apparatus, the data is received in a step 694a and in a step 694b is enciphered in a main encryption routine. This 
operation will be described in detail with reference to Fig. 84. A plain text Mn is inputted in a step 695a and combined 
(synthesized) with an ID number or the like. In a step 695b, using a one direction function such as the RSA function, it 
is enciphered by a secrete key of d = 512 bits, then followed by a step 695c to output the nth master cipher Cn. After 
this, the operational flow returns to a step 694c in Fig. 83 to check whether the n+1th, i.e., second, master encrypting 
apparatus is in operation or not. If "YES", the operational flow goes to a step 694d to transmit the first master cipher C1 
to a pressing factory. On the other hand, if "NO", in a step 694e the main encryption routine M1 is enciphered using a 
second cipher encoder 693v the first master cipher center has as a spare, thereby producing a second master cipher 
C2. In a step 694f the second master cipher C2 is transmitted. In a step 693g the first to nth master ciphers are received 
and in a step 693h they are combined sp as to draw up an integrated cipher C1 . A step 693u follows to check whether 
the C1 is recorded in the original record. If "YES", in a step 693i the C1 is recorded in a second recording area of the 
original record. On the other hand, if "NO", the operational flow goes to a step 693j to check whether the data contents 
are recorded or not. If not recorded, the operational flow advances to a step 693k to record them in a first recording area 
of the original record for the fabrication of the original record, before a disk is made and a reflective film is formed thereon. 
A step 693q is implemented to check whether or not the C1 is recorded ion the reflective film. If "YES", the operational 
flow goes through a step 693r into a reflective film C1 recording routine. This routine will be described with reference to 
Fig. 85. A step 696b is executed to check whether the physical feature of the reflective film is made or not. If "YES", 
notches (cut portions) are formed at random in the reflective film by means of a laser trimmer or the like, and the physical 
feature information on the notches are measured in a step 696d. If "NO", the operational flow advances to a step 696e 
to check whether or not to use the master cipher encoder. If "YES", a step 696f is implemented to transmit the physical 
feature and sub-cipher decode data to perform the first to nth master encryptions in the master encryption center. They 
are received in a step 696h, then followed by a step 696k On the other hand, if "NO", the operational flow goes to a 
step 696i to issue the serial number IDd at every disk and encipher the IDd and the physical information by using the 
mth sub-cipher decoder to make a sub-cipher Cs. Subsequently, in a step 696k the Cs or CR1 to CRn are formed on 
the reflective film in the form of notches. 

Returning back to Fig. 83, a protective layer or magnetic layer is formed in a step 693s and the disk is completed 
in a step 693t. In this case, in the mastering apparatus 529, the description of the external cipher encoder 579 in the 
network (Figs. 1 and 10) is omitted because it has been described with reference to Fig. 29. Since different n cipher 
keys are present on line at different areas in the world, the risk decreases. In addition, the operation does not start except 
that all the n cipher keys are used for cipher coincidence, thus providing a high degree of safety. 

A description will be made with reference to Fig. 86 in terms of the cipher decoder in the reproduction of this disk. 
The reproduction of the disk starts in a step 697a, and the integrated cipher C1 is reproduced in a step 697b and divided 
into the respective ciphers C1 to Cn in a step 697c which in turn, are converted into plain texts by the corresponding 
cipher decoders Dc(n) in the cipher-plain text converting routine of a step 697v. After setting of n = 0, n is incremented 
by one in a step 697 before being previously recorded in the ROM section 699 of the drive of the personal computer 
676 in Fig. 69. The corresponding decoders are read out from the master cipher decoders DC(1) to DC(n), and the 
cipher Cn is converted into a plain text. This plain text conversion routine will be described in detail with reference to 
Fig. 87. 

In Fig. 87, a step 698a is executed to input the cipher Cn, then followed by a step 698b to convert it into a plain text 
on the basis of a one direction function. In the case of RSA, the condition can be satisfied when e is above 3 and n takes 
a disclosed key above 256 bits. Both are disclosed data. Since in the case of RSA difficulty is experienced to obtain the 
encryption function on the basis of these decode functions, the secrecy can be maintained. In a step 698c the plain text 
data Mn is outputted. 

Returning back to a step 697h in Fig. 86, checking is made as to whether the plain text is correct or not. If "YES", 
the operational flow goes to a step 697i to check whether n is the last. If the answer of the step 697i is "NO", the operational 
flow returns to the step 697f . If "YES", the operational flow advances to a step 697j to check whether the plain text data 
coincidence system for all the ciphers is taken or not. If so, a check is made as to whether or not all the data M1 to Mn 
are in coincidence. If "NO", the operation stops. If "YES", the operational flow goes to a step 697m to output the physical 
feature information and so on. Further, the measured physical feature information data are measured in a step 697n so 
as to be checked with the outputted physical feature information in a step 697p. If not coincident therewith, the operation 
stops. On the other hand, if "YES", the operation is permitted. Subsequently, in a step 697r the scramble key enciphered 
in the sub-ciphering device is converted into a plain text on the basis of the sub-cipher decode information, or the ID 
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number and the sub-cipher of specific data are understood. If the plain text conversion is correctly carried out, the 
operation runs. If not correct, the operation stops. 

In this case, the sub-cipher decoder is converted into a plain text by the master cipher decoder of the ROM of the 
drive. Accordingly, it is possible to prevent the illegal duplication traders from replacing the sub-cipher encoder with the 

5 decoder for the duplication. In addition, the pirate edition can not operate except that they have the n master cipher keys 
and all the keys are leaked. The security drastically improves because of the one direction function cipher key duplicated. 

A description will be made with reference to Figs. 95 and 96 in terms of the encryption based on an elliptical function 
different from the RSA function. Roughly describing big routines, a step 735a is executed to make the first physical 
feature information, a step 735f is implemented to make the attestation cipher of the first physical feature information, 

w a step 735n is executed to attest the first physical feature information, and a step 735w is implemented to check the 
disk. In the step 735a, the disk physical feature is measure in a step 735b to obtain the first physical feature information. 
The first physical feature information is combined with the ID number and sub-cipher decoder number in a step 735b 
and compressed in a step 735d. The compressed information H is obtained in a step 735e. An attestation number is 
drawn up in a step 735f. First, in a step 735g a secrete key X (X = 128 bits or more) is inputted, and in a step 735h a 

15 disclosed system parameter G is determined at a point on an elliptical curve and f(x) is set as a one direction function 
and k is set to be a secrete random number. In this case, R = f (Gk) is obtained and R' = f (R) is then obtained so 
that in a step 735i the attestation ciphers R and S are produced in accordance with an equation 
S = (K x R' - H) X - 1 modQ . In a step 735j the attestation ciphers R, S and the plain text H including the first physical 
feature information are recorded on a disk or original record. The disk is put on the market in a step 735k. 

20 On the other hand, in the reproducing system side, a step 735m is executed such that the disk is mounted, and in 
a step 735p the attestation ciphers R, S and plain text H are reproduced. Further, in a step q the disclosed parameters 
G, Q are obtained, and in a step 735r a disclosed key Y of more than 128 bits is inputted, and further the decode 
calculation is performed. The calculations of A = SR - 1 modQ and B = HR - 1 modQ are performed under the condi- 
tion of Y = Gx . In a step 735t, the calculation of R = f (YAGB) is performed so as to check whether or not the right- 

25 and left-hand sides are coincident with each other. If "NO", in a step 735u a decision is made such that it is a duplicated 
disk, then followed by a step 735v to stop the operation. If "YES", since it indicates that the plain text is nore revised, 
the operational flow goes to a step 735w in Fig. 96 to expand the plain text H. Subsequently, a step 736b is implemented 
to output the first physical feature information, ID number and sub-cipher decoder number and a step 736c is executed 
to measure the disk physical feature to obtain the second physical feature information. In a step 736d, the first and 

30 second physical feature information are checked in the checking section, and in a step 736e a coincidence decision is 
made therebetween. If "NO", the operational flow goes to a step 736f to display "duplicated disk" and then to a step 
736g to stop the program. On the other hand, if 'YES", the operational flow advances to a step 736h to execute the 
program or output the reproduced data. In the case of the elliptical function, the plain text of the first physical feature 
information and attestation cipher are sent, whereby it is possible to reduce the cipher decode time because the data 

35 amount of the attestation cipher is small. The disclosed key cipher system is described in detail by "Elliptic Curve Cryp- 
tosystems", written by Kobliz, N., Mat h Comp. 48(1987), pp. 203-209. 

[Fourteenth Embodiment] 

40 A description will be made with reference to Figs. 88A, 88B and a flow chart of Fig. 89 in terms of the fourteenth 
embodiment relating to a method of recording the cipher information for the pirate edition prevention in a second recording 
area 708 in which TOC and so on are recorded in the fabricating process of an optical disk original record. Fig. 88A 
shows a state in which a signal is recorded a first recording area 707 of an original record 700a which is for chiefly 
recording program softs or image signals. In the case of the common CD or LD, TOC is provided at an inner circumferential 

45 portion and the recording starts from the inner circumferential portion. However, in this invention, a recording signal 
outputting section 723 generates a signal in a direction opposite to the time-axis direction unlike the direction of the 
common signal. 

Accordingly, in a step 71 1 b of the flow chart of Fig. 89, the optical head 6 records the signal from an outer circumferential 
portion and tracking-controlled toward an inner circumferential portion so that spirally arranged pits (a first recording line 

so 709) are recorded in the first recording area 707. At this time, in the mastering apparatus, a rotational angle detecting 
section 1 7a of a motor 1 7 generates rotational angle data with high accuracy and a recording signal outputting section 
723 outputs data such as addresses, Accordingly, These data are simulation-treated in a physical feature measuring 
section 703. Thus, a CPU 724 can simulate, in units of submicrons, the formation of the pits on the original record. In a 
step 71 1c all the physical feature information on the original record are measured, and in a step 71 1d the measurement 

55 is made as to how each pit having a given relation to an address takes an angular position on the original record so as 
to extract the feature section which is extremely difficult to duplicate. It is also appropriate to take the information merely 
indicative of the angle of the pit in a given address. Moreover, when an area in which the pits of the adjacent tracks 
accidentally assume the same pit table and pit arrangement is found, it is possible that the angular position or address 
position, track number and inphase pit data train are used as the physical feature information. The physical feature 
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information has repeatedly been described above with reference to Figs. 10, 18, 20, 38 and 43, and the description 
thereof is omitted. 

In a step 71 1e, the ID number or sub-cipher decode data is combined with the physical feature information and fed 
to a plurality of encryption devices (step 694), which data is received by the nth encryption device in a step 694i to be 

5 enciphered in a step 694j, the resulting cipher being transmitted in a step 694k. This routine is shown in Figs. 83 and 
84, and omitted. In a subsequent step 71 1f, the ciphers C1 to Cn enciphered by the one direction function cipher encoder 
537 are received, and in a step 71 1g the ciphers C1 to Cn are synthesized and further combined with the second 
recording signal, the resulting signal being made in a recording signal processing section 723 in Fig. 88A to be subse- 
quent to the first recording signal. The recording section 37 records pits at an inner circumferential portion of the original 

10 record 700b, which contains TOC and so on, so as to form a second recording line 710 spirally directing to the inner 
circumferential side. The recording is completed in a step 71 1h. 

It is common that the original record is made from the inner circumferential side to the outer circumferential side, 
i.e., in the reproducing direction. Contrary to this, in this invention the time-axisdirection of the recording signal is reversed 
so that the recording is made from the outer circumferential side to the inner circumferential side for the fabrication of 

15 the original record, and further the pirate edition preventing signal is finally recorded thereon. This method makes it 
possible to form pits successively arranged as one track. This can realize the pirate edition prevention in conformity with 
the standard of a CD or the like. 

The reproducing operation will be described with reference to a block diagram of an information precessing system 
of Fig. 90 and a reproduction flow chart of Fig. 91. In a step 712a, the second recording area 708 including the TOC 

20 area and others is reproduced, as well as the case of CD. Subsequently, in a step 712b the first to nth ciphers C1 to Cn 
and information such as TOC are reproduced and in a step 712c the ciphers C1 to Cn are converted into plain texts by 
the first to nth cipher decoders 534a, 534b, 534c, which are fixed keys in the ROM 699 of the master cipher decoder 
534, in accordance with the cipher decode routine 698 in Fig. 87, thus obtaining M1 to Mn. In a step 712d, M1 to Mn, 
i.e., physical feature information, sub-cipher decode information, and ID number are outputted from a plain-text infor- 

25 mation outputting section 714. A step 71 2e follows to check, in a plain text data checking section 715, whether all or a 
portion of M1 to Mn are coincident or not. If the answer of a step 71 2f is OK, the operational flow goes to a step 71 2g. 
If the answer of the step 71 2f is "NO", the operational flow goes to a step 713 to execute a stopping routine. In this 
routine, in a step 713a the CPU 665 displays "duplicated disk" on the display section 16, and in steps 713b and 713c, 
a program/reproducing operation stopping section 717 stops the program or reproducing operation. 

30 On the other hand, if "YES", the reproduction starts in a step 712g, then followed by a step 712h to obtain the 
address, rotational angle and low-reflection section of the disk by a physical feature measuring section 703a. Further, 
an off-track instruction signal is given to a tracking control section 24 so that a light beam travels between the tracks to 
obtain a crosstalk signal, thereby detecting the inphase signal and obtaining a data train. The measured physical feature 
information of the first recording area 707 or the second recording area 708 is obtained in this way. This method has 

35 been described before with reference to Fig. 18 or others, and the description thereof is omitted. In a step 712i, the 
physical feature information checking section 535 checks the measured physical feature information with the physical 
feature information. If a step 712j decide "no coincidence", the operational flow goes to a step 713d, i.e., the foregoing 
stopping routine 71 3. On the other hand, if "OK", the operational flow advances to a step 712k so that a program/repro- 
ducing operation allowing section 722 continues the reproduction or allows the operation of the program. 

40 In a step 71 2m, checking is made as to whether or not to use the sub-cipher decoder. If "NO", the operational flow 
jumps to a step 71 2r to output the data. If "YES", steps 71 2n and 71 2p are executed to reproduce the encryption signal 
in the first recording area to convert it into a plain text. Or the scramble release key added to the variable length sign 
section 683, which has been described with reference to Fig. 77, is enciphered through this sub-cipher and the scramble 
signal is recorded in the optical disk. In addition, in the step 681 h of the reproduction flow chart of Fig. 79, the scramble 

45 release key is descrambled by the sub-cipher decoder in Fig. 91 , whereby the user of the legal disk can reproduce the 
complete image. On the other hand, since the illegally duplicated disk can not be descrambled, only the variable length 
signal component, i.e., the poor image not having a high-frequency component, is reproducible. Further, in a step 71 2q, 
the plain text data due to the sub-cipher or the image signal obtained by descrambling the scrambled image signal is 
outputted and in a step 71 2r the final data is outputted from the outputting section. 

so As shown in Figs. 88A and 88B, the time axis (base) of the recording data is reversed so that the recording is made 
from the outer circumferential side to the inner circumferential side for the fabrication of the original record, realizing an 
addition type pirate edition preventing disk with one spiral track. Thus, since the added data can be reproduced by the 
ordinary optical head without the change of the standard, the structure becomes simplified. 

As described above, according to this invention, it is possible to realize media having a magnetic recording section 

55 on its surface opposite to its optical recording surface while having the standard of CDs and the like, and further to realize 
a recording and reproducing system which provides reliability in the home-use environment at a cost reasonable for the 
home-use. In addition, since the disk physical ID is enciphered by a one-direction function cipher encoder, it is possible 
to improve the degree of security for duplication prevention. 
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Claims 

1. An information reproducing system comprising means (17) for rotationally driving a disc-like optical recording 
medium (2) wherein information is recorded in the form of pits, an optical head (6) for reading out the recorded 
information from said optical recording medium, head-moving means (23) for making said optical head movable 
radially on said optical recording medium, and signal processing means for processing the information read out 
through said optical head, which system is characterised by including: 

first physical information detecting means (743, 38, 665) for detecting, on the basis of information read out 
through one of said optical head and a magnetic head, first physical feature information (532) which is representative 
of a physical feature including at least one of a two-dimensional pit arrangement and a pit configuration on said 
optical recording medium and which is enciphered and recorded at manufacturing of said optical recording medium; 

decryption means (534) for deciphering the first physical feature information; 

means (1 7a, 6, 38, 703a) for measuring a physical feature of said optical recording medium to detect second 
physical feature information; 

check means (535) for checking said second physical feature information with said first physical feature infor- 
mation to make a decision as to whether or not both are in a specific relation to each other; and 

control means (71 7, 665) for, when the check means decides that said second physical feature information 
is not in the specific relation to said first physical feature information, stopping one of an operation of a specific 
program read out from said optical recording medium, the subsequent reading-out of information from said optical 
recording medium, and a given process of information, read out from the optical recording medium, the given process 
being practiced by said signal processing means. 

2. A system as defined in claim 1 , characterised in that said decryption means (534) converts a cipher into a plain 
text including said first physical feature information by using a disclosed key cipher system function (695b, 698b, 
735h) for a decryption calculation (698b, 735s). 

3. A system as defined in claim 2, characterised in that said second physical feature information detecting means 
detects a coordinate position of an optical recording signal on said optical recording medium by using coordinate 
position detecting means (335) for the detection of said second physical feature information. 

4. A system as defined in claim 3, characterised in that said coordinate position detecting means obtains said second 
physical feature information by using angular position detecting means (1 7a) designed to detect an angular position 
of a specific recording signal on said recording medium. 

5. A system as defined in claim 4, characterised in that said coordinate position detecting means has rotation detect- 
ing means (1 7) for detecting the rotation of a motor to detect an arrangement angle of said recording signal. 

6. A system as defined in claim 5, characterised in that said rotation detecting means comprises detecting means 
(17a) for detecting a rotational pulse signal from said motor. 

7. A system as defined in claim 6, characterised in that said rotation detecting means detects the rotation by using 
time division means (737) for time-dividing said rotational pulse signal from said motor to generate rotational pulses 
larger in number than the pulses of said rotational pulse signal. 

8. A system as defined in claim 5, characterised in that said rotation detecting means detects the rotation on the 
basis of a rotational pulse signal from an FG (1 7) mounted on said motor. 

9. A system as defined in claim 2, characterised in that said second physical feature information detecting means 
detects said second physical feature information by using tracking displacement detecting means (554) for detecting 
a tracking displacement. 

10. A system as defined in claim 9, characterised in that said second physical feature information detecting means 
obtains said second physical feature information by using angular position detecting means (553) for detecting track 
displacements (554) of two or more specific recording signals placed on the adjacent tracks and disposed at the 
same angle and arrangement angles of said recording signals. 

1 1 . A system as defined in claim 9, characterised in that said tracking displacement detecting means (24a) detects 
a track displacement by using tracking amount detecting means (554) for detecting reflected light from an optical 
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recording layer by a plurality of light-receiving sections (24b, 24c) divided in a tracking direction to obtain a tracking 
error signal. 

1 2. A system as defined in claim 1 , characterised in that said second physical feature information detecting means 
is equipped with pit depth detecting means (555) for detecting a pit depth of a specific recording signal to detect 
said second physical feature information. 

13. A system as defined in claim 12, characterised in that said pit depth detecting means (555) detects a shallow 
pit area, in which pits are shallow in depth, by using a multi-level slicer (555b) having two or more slice levels. 

14. A system a s defined in claim 13, characterised in that said pit depth detecting means (555) detects a second 
pit group (560c) recorded after a first pit group (561a) for a specific recording signal, said first pit group having pits 
with a common depth, and said second pit group having pits which are shallower than pits of said first pit group. 

1 5. A system as defined in claim 14, characterised in that a frame synchronizing signal (738) is used as said specific 
recording signal. 

1 6. A system as defined in claim 1 3, characterised in that said pit depth detecting means reproduces a learning pit 
group (560a) of a first pit group to detect a first offset voltage (746) with a first slice level before setting said slice 
level at said first offset voltage to reproduce a second pit group (560b). 

1 7. A system as defined in claim 1 3, characterised in that said pit depth detecting means (555) obtains said second 
physical feature information by measuring a pit length of a pit group satisfying a first slice level and a pit length of 
a pit group satisfying a second slice level. 

18. A system as defined in claim 13, characterised in that, when a slice level for a small light quantity is set as a 
first slice level, said multi-level slicer (555b) receives detection signals of pits satisfying only said first slice level but 
not satisfying a second slice level, and said pit depth detecting means (555) obtains said second physical feature 
information by measuring the number of said detection signals by means of a counter (555c). 

19. A system as defined in claim 1, characterised in that reproducing means detects, on the basis of an internal 
pressure of pits, a first low-reflection section (740) in which a reflected light quantity is small and a high-reflection 
section (741) in which a reflectance is higher than that of said first reflection section due to a portion with no pit, 
and in an apparatus for reproducing a first optical recording signal, second low-reflection section detecting means 
(586) detects a second low-reflection section (584) provided in an optical recording signal area (742) and having a 
reflectance lower than that of said first low-reflection section and providing a reflected light quantity smaller than 
that of said first low-reflection section, and said second physical feature information detecting means obtains said 
second physical feature information on the basis of a detection signal of said second low-reflection section detecting 
means. 

20. A system as defined in claim 1 9, characterised in that said second low-reflection section detecting means detects 
said second low-reflection section by slicing said first optical recording signal at a first slice level of a first level slicer 
(386) of level slicers having two or more slice levels and by slicing a reproduced signal at a second slice level of a 
second level slicer (586) which corresponds to a light quantity smaller than a light quantity for said first slice level. 

21. A system as defined in claim 20, characterised by further comprising second low-reflection section position 
detecting means (696) for detecting at least one of a position, circumferential length and circumferential interval of 
said second low-reflection section on the basis of a second low-reflection section detection signal of said second 
low-reflection section detecting means (586) and a first optical reproduced signal detected by reproducing means 
(590). 

22. A system as defined in claim 21, characterised in that, when a mark signal detecting section (593) detects a 
specific mark signal of said first optical reproduced signal, said second low-reflection section position detecting 
means (596) detects one of said position, said circumferential length and said circumferential interval of said second 
low-reflection section on the basis of a mark detection signal of said mark signal detecting section. 

23. A system as defined in claim 22, characterised in that said mark signal detecting section (593) detects an address 
signal as said mark signal. 
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24. A system as defined in claim 23, characterised in that said second low-reflection section position detecting 
means (596) detects one of said position, said circumferential length and said circumferential interval of said second 
low-reflection section on the basis of said address signal and the number of reproduction clock signal counted by 
a counter (598). 

25. A system as defined in claim 24, characterised in that said second low-reflection section position detecting 
means (596) detects said position of said second low-reflection section on the basis of said address signal, the 
number of frame synchronizing signals counted by said counter (598) and the number of said reproduction signals 
counted by said counter (598). 

26. A system as defined in claim 23, characterised in that said second low-reflection section position detecting 
means (596) detects said position of said second low-reflection section on the basis of an address signal of said 
first optical reproduced signal and a frame synchronizing signal. 

27. A system as defined in claim 23, characterised in that said second low-reflection section position detecting 
means (596) detects one of said position, said circumferential length and said circumferential interval of said second 
low-reflection section with the number of reproduced clocks of a synchronizing signal reproducing means (38a) 
which obtained from said first optical reproduced being counted by a counter (598). 

28. A system as defined in claim 27, characterised in that said synchronizing signal reproducing means detects as 
a synchronizing signal a clock signal from a synchronizing clock reproducing means (38a) of an EFM demodulating 
means (592). 

29. A system as defined in claim 22, characterised in that said mark signal detecting section (593) detects, as said 
mark signal, a specific signal of a sub-code signal of a CD. 

30. A system as defined in claim 21 , characterised in that a time correction section (607) measures a time interval 
between a reference markdetection signal detected by a mark signal detecting means (593) and a reference second 
reflective section detection signal detected by said second low-reflection section detecting means (586) to obtain a 
reference correction time, and further said time correction section (607) corrects a time interval between a specific 
mark signal detection signal and a second reflective section detection signal on the basis of said reference correction 
time, before said second low-reflection section position detecting means (596) detects a position of said second 
reflective section detection signal. 

31 . A system as defined in claim 1 9, characterised in that said second low-reflection section detecting means (586) 
detects only said second low-reflection section longer than said first low-reflection section in a tracking direction. 

32. A system as defined in claim 19, characterised in that said second physical feature information detecting means 
obtains said second physical feature information by detecting an angular position of said second low-reflection 
section on said recording medium on the basis of a first detection signal on said second low-reflection section 
detected by said second low-reflection section detecting means (586) and a second detection signal detected by 
an angle detecting means (355) of rotating means. 

33. A system as defined in claim 19, characterised in that said second physical feature information detecting means 
obtains said second physical feature information by measuring start and end positions of said second low-reflection 
section on the basis of a second low-reflection section detection signal detected by said second low-reflection section 
detecting means (586) and at least one of a frame synchronizing signal and clock signal of a first optical reproduced 
signal detected by an optical reproducing means (590). 

34. A system as defined in claim 1 , characterised in that said second physical feature information detecting means 
(635) detects said second physical feature information with error signal detecting means (633) being used as physical 
feature information detecting means to detect the presence or absence of an error signal (632) of a specific recording 
signal in a specific address. 

35. A system as defined in claim 34, characterised in that, when the number (535b) of said error signals of said 
specific recording signal indicated in said first physical feature information does not exceed a predetermined value 
(535b), said check means (535) issues a stop instruction. 
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36. A system as defined in claim 1 , characterised in that said second physical feature information detecting means 
uses a special sign detecting means (640) as physical feature information detecting means and detects said second 
physical feature information by detecting that a special sign (639) which is not present in a first legal sign decode 
table in sign decode means exists in a specific recording signal area. 

37. A system as defined in claim 36, characterised in that, when said special sign (639) is not present in said specific 
recording signal area indicated by said first physical feature information, said check means (535) outputs a stop 
instruction. 

38. A system as defined in claim 1 , characterised in that said second physical feature information detecting means 
has pit arrangement detecting means (747) for detecting pit arrangements on two or more tracks, adjacent to each 
other, in a specific area indicated by said first physical feature information of said recording medium. 

39. A system as defined in claim 38, characterised in that said pit arrangement detecting means (747) detects an 
area in which pit arrangements on the adjacent two tracks are in phase or in antiphase with each other. 

40. A system as defined in claim 39, characterised in that said pit arrangement detecting means (747) obtains said 
second physical feature information by detecting positional information of an inphase pit area in which the recording 
signal pits with the longest pit length are arranged to be in phase with each other. 

41 . A system as defined in claim 40, characterised by further comprising inphase/antiphase signal position detecting 
means (748) for detecting a position of an inphase pit area by using address information and a reproduced clock 
signal to obtain a portion of said second physical feature information (734). 

42. A system as defined in claim 39, characterised by further comprising a specific inphase signal detecting section 
(749) for detecting a specific inphase signal (654a) corresponding to a specific pit length on the basis of a detection 
signal of inphase/antiphase signal position detecting means (747). 

43. A system as defined in claim 42, characterised in that said specific inphase signal detecting section (749) detects 
an inphase signal (654a) of a frame synchronizing signal as said specific inphase signal. 

44. A system as defined in claim 39, characterised by further comprising inphase/antiphase signal position detecting 
means (747) for detecting inphase signals (654a, 654b) corresponding to inphase pit arrangements on adjacent 
three or more tracks. 

45. A system as defined in claim 44, characterised in that said inphase/antiphase signal position detecting means 
(747) detects specific inphase signals (654a, 654b) on adjacent three tracks where the longest pits are disposed in 
phase as inphase signals. 

46. A system as defined in claim 45, characterised by further comprising a specific inphase signal detecting section 
(749) for detecting an inphase signal (654a) of a frame synchronizing signal as said specific inphase signal. 

47. A system as defined in claim 39, characterised by further comprising off-tracking means (646) provided in a 
tracking means (24) for tracking between two tracks to reproduce inphase signals or antiphase signals of pits of 
said two tracks, and further comprising inphase/antiphase signal detecting means (747) for detecting an inphase 
or antiphase area in which pit arrangements on said two tracks are in phase with each other to obtain said second 
physical feature information. 

48. A system as defined in claim 44, characterised by further comprising off-tracking control means (646) responsive 
to an off-tracking switching signal from control means (10) to cause a light beam to be switch from a state of travelling 
one track to a state of travelling between two tracks to reproduce inphase signals or antiphase signals of said two 
tracks so that said inphase/antiphase signal detecting means (747) detects said inphase signals or antiphase sig- 
nals. 

49. A system as defined in claim 48, characterised in that said off-tracking control means (24a, 646) inverts the 
polarity of a tracking servo of tracking means in accordance with said off-tracking switching signal to make switching 
to an off-tracking state in which said light beam travels between said two tracks. 
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50. A system as defined in claim 38, characterised in that said pit arrangement detecting means detects an area in 
which pit arrangements on adjacent two tracks are in phase with each other. 

51. A system as defined in claim 1, characterised by further comprising reproducing means for detecting a low- 
reflection section (740) producing a small reflected light quantity due to the presence of pits and a high-reflection 
section (741) having a higher reflectance than that of said low-reflection section due to the absence of pits, second 
low-reflection section detecting means (586) for detecting a second low-reflection section placed in an optical record- 
ing signal area (742) and having a lower reflectance than that of said first low-reflection section to produce a second 
reflected light quantity, and demodulating means (621) for demodulating a second low-reflection section detection 
signal of said second low-reflection section detecting means into a first digital signal. 

52. A system as defined in claim 51 , characterised in that level slicers having two or more slice levels are used so 
that said first optical recording signal is sliced with a first slice level in a first level slicer (586) to obtain said first 
digital signal from a first optical reproduced signal and a reproduced signal is sliced with a second slice level in a 
second level slicer (586), said second slice level corresponding to a light quantity smaller than that for said first slice 
level, whereby said second low-reflection section detecting means (586) detects said second low-reflection section. 

53. A system as defined in claim 52, characterised by further comprising at least one of second low-reflection section 
pulse width detecting means (621 e) for detecting the circumferential length of said second low-reflection section on 
the basis of said second low-reflection section detection signal due to said second low-reflection section detecting 
means (586) and said first optical reproduced signal due to said reproducing means (590) and second low-reflection 
section interval detecting means (621 b) for detecting a circumferential interval of said second low-reflection section, 
said demodulating means (62 1 ) demodulating said first digital signal on the basis of a detection signal of said second 
low-reflection section interval detecting means. 

54. A system as defined in claim 53, characterised in that, on the basis of the number of reproduction clock signals 
counted by a counter (598c), said second low-reflection section pulse width detecting means (621 e) detects a pulse 
duration of a detection signal of said second low-reflection section and said second low-reflection section pulse 
interval detecting means (621b) detects an interval of said second low-reflection section detection signal. 

55. A system as defined in claim 51, characterised in that said decryption means (534) obtains said first physical 
feature information by obtaining a first cipher from said first digital signal and by decrypting said first cipher. 

56. A system as defined in claim 55, characterised in that said decryption means (534) encrypts said first cipher 
and converts at least said first physical feature information and an ID number (750) into plain texts. 

57. A system as defined in claim 55, characterised by further comprising an ID outputting section (750) for obtaining 
and outputting an ID number, which is a plain text, from said first digital signal. 

58. A system as defined in claim 55, characterised in that said demodulating means (621) outputs an ID number, 
which is a plain text or cipher, on the basis of said first digital signal, and further outputs a first secrete key, mathe- 
matically independent of said ID number, when a communication is established with a one direction function, and 
characterised by further comprising a calculation section (10) for enciphering secrete information with said first 
secrete key and a disclosed key cipher such as an RSA function to transmit said cipher, together with said I D number, 
through a communication section (664) to an external computer (633). 

59. A system as defined in claim 1, characterised in that said decryption means (534) converts a first cipher, 
encrypted with a disclosed key cipher system function, into a plain text including said first physical feature informa- 
tion. 

60. A system as defined in claim 59, characterised in that said decryption means enciphers said first cipher by using 
an integer d a 256 bits as a secrete key and converts said first cipher into said plain text by using an integer n a 
256 bits as a decode key and disclosed key. 

61. A system as claimed in claim 60, characterised in that said decryption means uses an RSA function as said 
disclosed cipher system function. 

62. A system as claimed in claim 61, characterised in that, when said first cipher is taken as C, said plain text is 
taken as M, said disclosed key is taken to be an integer n a 256 bits and said secrete key is taken to be an integer 
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d above 256 bits , said decryption means obtains said first physical feature information by decoding said plain M in 
accordance with an equation of M = Cemod n as a function of said first cipher C made by encrypting means, a 
disclosed integer e above 3 and said disclosed key n in accordance with an equation of C = Mdmod n . 

63. A system as defined in claim 60, characterised in that said decryption means uses an elliptical function as said 
disclosed key cipher system function. 

64. A system as defined in claim 59, characterised in that said decryption means reproduces a plain text conversion 
function recorded in said recording medium, and converts a reproduced cipher into a plain text with said plain text 
conversion function. 

65. A system as defined in claim 59, characterised in that said decryption means obtains said first physical feature 
information by using cipher-plain text conversion means which converts a cipher reproduced from said recording 
medium into a plain text by using a cipher decode function stored in a memory section of a non-volatile RAM or 
ROM of said system. 

66. A system as defined in claim 65, characterised in that a plain text conversion function group comprising a plurality 
of plain text conversion functions is stored in said memory section of said system, a reproduced cipher is converted 
into a plain text through a plurality of specific functions of said plain text conversion function group to obtain a plurality 
of plain text groups, and a stop instruction is issued except that all of said plain text groups are normally obtained. 

67. A system as defined in claim 32, characterised in that for obtaining said first physical feature information, a 
cipher reproduced from said recording medium is converted into a plain text by means of a plain text conversion 
function stored in a memory section of an information processing unit connected to said system. 

68. A system as defined in claim 40, characterised in that said decryption means converts a first cipher into a plain 
text with a cipher decode function stored in an OS. 

69. A system as defined in claim 32, characterised in that an RSA function is used as a one direction function. 

70. An information recording system characterised by comprising: 

encryption means (537) for enciphering, using a one direction function, first physical feature information (532) 
indicative of a physical feature including at least one of a two-dimensional pit arrangement and pit configuration on 
a disc-like optical recording medium; and 

recording means (37, 6, 23, 24, 17, 26, 10) for recording the enciphered first physical feature information on 
one of said optical recording medium and an original record therefor so that the encrypted first physical feature 
information is distinguishable from main information to be recorded on said optical recording medium. 

71 . An information recording system as defined in claim 70, wherein said encryption means uses a disclosed key 
cipher system function as said one direction function. 

72. An information recording system as defined in claim 71 , wherein an RSA function is used as said disclosed key 
cipher system function. 

73. An information recording system as defined in claim 71, wherein an elliptical curve function is used as said 
disclosed key cipher system function. 

74. A method of manufacturing a disc-like optical recording medium, which comprises the steps of: 

recognizing first physical feature information (532) representative of a physical feature at least including one 
of a two-dimensional pit arrangement and pit configuration on the disc-like optical recording medium; 
encrypting said first physical feature information by using a one direction function; and 
recording the encrypted first physical feature information on one of said optical recording medium and an 
original record therefor so that the encrypted first physical feature information is distinguishable from main informa- 
tion to be recorded on the optical recording medium. 

75. A manufacturing method as defined in claim 74, wherein said encrypting step includes using a disclosed key 
cipher system function as said one direction function. 
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76. A disc-like optical recording medium manufactured through the steps of recognizing first physical feature infor- 
mation (532) representative of a physical feature at least including one of a two-dimensional pit arrangement and 
a pit configuration on said disc-like optical recording medium, encrypting said first physical feature information by 
using a one direction function; and recording the encrypted first physical feature information on one of said optical 
recording medium and an original record therefor so that the encrypted first physical feature information is distin- 
guishable from main information to be recorded on said optical recording medium. 

77. An optical recording medium as defined in claim 76, wherein a disclosed key cipher system function is used as 
said one direction function. 

78. An optical recording medium as defined in claim 77, wherein an RSA function is used as said disclosed key 
cipher system function. 

78. An optical recording medium as defined in claim 77, wherein an elliptical function function is used as said dis- 
closed key cipher system function. 

80. An optical recording medium as defined in claim 77, wherein a physical feature including circumferential angular 
position information of pits on said optical recording medium is used as said first physical feature information. 

81 . An optical recording medium as defined in claim 77, wherein a physical feature including displacement informa- 
tion of a track with pits on said optical recording medium in a tracking direction is used as said first physical feature 
information. 

82. An optical recording medium as defined in claim 77, wherein a physical feature including a displacement of a 
depth of a pit on said optical recording medium is used as said first physical feature information. 

83. An optical recording medium as defined in claim 77, wherein as said first physical feature information there is 
used a physical feature including arrangement information of a second low-reflection section placed in a recording 
area having a high-reflectance section and a low-reflectance section due to the presence of pits, said second low- 
reflection having a reflectance lower than that of said low-reflectance section. 

84. An optical recording medium as defined in claim 77, wherein as said first physical feature information there is 
used a physical feature including arrangement information of an area on said optical recording medium in which pit 
arrangements of tracks adjacent to each other are the same. 

85. An optical recording medium as defined in claim 77, wherein as said first physical feature information there is 
used a physical feature including arrangement information of a pit group on said optical recording medium by which 
signals including specific error signals are recorded. 

86. An optical recording medium as defined in claim 77, wherein as said first physical feature information there is 
used a physical feature including arrangement information of a pit group on said optical recording medium by which 
signals including modulated signals with a specific sign are recorded. 

87. A method of preventing an illegal copy of a disc-like optical recording medium or of preventing an illegal install 
of information on the disc-like optical recording medium, which comprises the steps of: 

detecting on the basis of information read out from the optical recording medium first physical feature infor- 
mation (532) which is representative of a physical feature including at least one of a two-dimensional pit arrangement 
and pit configuration on said optical recording medium and which is encrypted and recorded by using a one direction 
function at manufacturing of said optical recording medium; 

decrypting said first physical feature information; 

measuring a physical feature of said optical recording medium to obtain second physical feature information; 

checking said second physical feature information with said first physical feature information to make a deci- 
sion as to whether or not both are in a specific relation to each other; and 

when the check step decides that the second physical feature information is not in the specific relation to the 
first physical feature information, stopping the operation of a specific program read out from the optical recording 
medium, stopping at least one of the subsequent reading-out of information from the optical recording medium, and 
a given process of information read out from said optical recording medium, the given process being practiced by 
signal processing means. 
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88. A method of preventing an illegal copy of a disc-like optical recording medium or of preventing an illegal install 
of information on the disc-like optical recording medium, which comprises the steps of: 

detecting first physical feature information (532) from said optical recording medium, said first physical feature 
information being indicative of a physical feature at least including a two-dimensional pit arrangement or a pit con- 
figuration on the optical recording medium, encrypted using a one direction function and recorded on said optical 
recording medium or an original record therefor so as to be distinguishable from main information to be recorded 
on said optical recording medium; 

decrypting said first physical feature information; 

measuring a physical feature of said optical recording medium to obtain a second physical feature information; 

checking said second physical feature information with said first physical feature information to make a deci- 
sion as to whether or not both are in a specific relation to each other; and 

when the check step decides that said second physical feature information is not in the specific relation to 
said first physical feature information, stopping at least one of the operation of a specific program read out from said 
optical recording medium, the subsequent reading-out of information from the optical recording medium, and a given 
process of information, read out from the optical recording medium, said given process being practiced by signal 
processing means. 

Amended claims 

1. An information reproducing system comprising means (17) for rotationally driving a disc-like optical recording 
medium (2) wherein information is recorded in the form of pits, an optical head (6) for reading out the recorded 
information from said optical recording medium, head-moving means (23) for making said optical head movable 
radially on said optical recording medium, and signal processing means for processing the information read out 
through said optical head, which system is characterised by including: 

first physical information detecting means (743, 38, 665) for detecting, on the basis of information read out 
through one of said optical head and a magnetic head which scans a magnetic recording area or a magnetic record- 
ing medium, first physical feature information (532) which is representative of a physical feature including at least 
one of a two-dimensional pit arrangement and a pit configuration on said optical recording medium and which is 
enciphered and optically recorded on said optical recording medium or magnetically recorded on said magnetic 
recording area provided at a given area of said optical recording medium or on said magnetic recording medium 
which is separate from said optical recording medium, at manufacturing of said optical recording medium; 

decryption means (534) for deciphering the first physical feature information; 

means (1 7a, 6, 38, 703a) for measuring a physical feature of said optical recording medium to detect second 
physical feature information; 

check means (535) for checking said second physical feature information with said first physical feature infor- 
mation to make a decision as to whether or not both are in a specific relation to each other; and 

control means (71 7, 665) for, when the check means decides that said second physical feature information 
is not in the specific relation to said first physical feature information, stopping one of an operation of a specific 
program read out from said optical recording medium, the subsequent reading-out of information from said optical 
recording medium, and a given process of information, read out from the optical recording medium, the given process 
being practiced by said signal processing means. 

2. A system as defined in claim 1 , characterised in that said decryption means (534) converts a cipher into a plain text 
including said first physical feature information by using a disclosed key cipher system function (695b, 698b, 735h) 
for a decryption calculation (698b, 735s). 

Brief statement of amendment under article 19(1) 

Claim 1 has been amended to make clear that the recording of first physical feature information can be either optically 
performed on an optical recording medium or magnetically performed on a magnetic recording area provided at a given 
area of the optical recording medium or on a magnetic recording medium which is separate from the optical recording 
medium. 
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